Page 1 of 1

Manipulating userid in rexx

PostPosted: Wed Jun 19, 2013 8:51 pm
by raovivek79
Hi,

I have a weird problem.

I am writing a rexx utility for a user who will be entering some data in the screen (ISPF panel). My utility will be capturing the data entered and depending on user input, I will be assigning a request number for the user and storing it in a flat file.

Here is the problem, the user has requested that the file I store the data in should not be editable by anyone (including the user).

We have a facility in our shop by which the security admin can define a dummy id and give edit access to the file to that dummy id.
My question is, Can I switch the userid in my rexx program from the logged on user to the dummy id before I write to the file? If yes, then how do I do it.

I was looking at the SETUID command. But I am not sure how to use it and if it will be useful in this case.

Thanks,
Vivek

Re: Manipulating userid in rexx

PostPosted: Wed Jun 19, 2013 9:37 pm
by enrico-sorichetti
My question is, Can I switch the userid in my rexx program from the logged on user to the dummy id before I write to the file?

NO !

and .... beware about mangling logons and userids
it could be cause for lawful termination.

Re: Manipulating userid in rexx

PostPosted: Wed Jun 19, 2013 9:47 pm
by Pedro
I have never done it.

But I think you need an APF authorized program to update the file. And permit the program to have UPDATE access to the dataset, rather than permit the userid.