Page 1 of 1

tso/e logon screen

PostPosted: Thu Jun 28, 2012 3:29 pm
by mehi1353
Hi all,
I am Mehrdad rastgar from Bank Mellat,IRAN.
In TSO/E logon screen, How i can protect the "command" field ?

(i tried USER.TSO.TCOMMAND and USER.TSO.* profiles in FIELD class in racf. now users cannot change their command from tso options in racf.but they can change their command field from their logon screen easily and enter with another command !!!)

any helps could be appreciated.

best regards,
Mehrdad

Re: tso/e logon screen

PostPosted: Thu Jun 28, 2012 3:58 pm
by expat
Change the panel definition to remove that field

Re: tso/e logon screen

PostPosted: Fri Jun 29, 2012 11:54 am
by mehi1353
Hi,

You mean "sys1.samplib(ikjapenu)" or somewhere else?



best regards

Re: tso/e logon screen

PostPosted: Fri Jun 29, 2012 12:23 pm
by NicC
Well, if you do not know then it probably is not you sphere of activity.

Re: tso/e logon screen

PostPosted: Fri Jun 29, 2012 9:44 pm
by Pedro
Not sure what IKJAPENU is... I only found (IKJLPENU) in my samplib, as described in TSO/E Customization manual.

As an alternative, perhaps use the post-display exit IKJEFLN2. It gets control after the user provides the password and presses Enter. I believe you can blank out the command text before it gets executed.

See "Writing a logon post-display exit (IKJEFLN2)" in the TSO/E Customization manual. In fact, you should read the entire chapter 8.