Page 1 of 1

switching tso userid in rexx

PostPosted: Sat Aug 15, 2009 3:23 pm
by dliang
Has anyone tried switching the TSO/RACF userid in the middle of a rexx execution? Here's why I need to do this: Half way into processing my rexx, I need to execute some DB2 commands under a different racf userid that has been granted appropriate Db2 privileges.

Thanks,
David

Re: switching tso userid in rexx

PostPosted: Sun Aug 16, 2009 7:45 am
by dick scherrer
Hello and welcome to the forum,

What a horrible idea. . . This would violate the security policy of any organization. . .

If you believe there is a business reason for you to issue restricted commands, you need to have your management upgrade your permissions.

Re: switching tso userid in rexx

PostPosted: Mon Aug 17, 2009 2:23 am
by dliang
Hi Dick:
Thanks for getting back to me.

I know, the idea sounds odd and cumbersome, but the whole business reason is about "control on certain priviledged db2 maintenance functions". When it comes to executing one of these privileged DB2 functions, no developer is allowed to do it except for the powerful racf userid whom I'm trying to switch/surrogate to in my rexx.

Appreciate your feedback, and I'll keep researching into a workaround.

Regards,
David.

Re: switching tso userid in rexx

PostPosted: Mon Aug 17, 2009 4:29 am
by dick scherrer
Hello,

the idea sounds odd and cumbersome
No, just wrong. Many/most developers believe they should also be able to do whatever they want ;)

no developer is allowed to do it
Of course not. . . Which is quite normal.

I'll keep researching into a workaround.
"Beating the system" is grounds for termination many places. . .

If there is truly a business reason ("I want" is not a business reason) speak with your management to have your id upraded.