Limit JESSPOOL Access In Top Secret

Products

• Top Secret

Issue/Introduction

PERMIT JESSPOOL(node.) ACCESS(ALL) grants a user access to all JESSPOOL resources.

Is there a way to granularly grant access to certain JESSPOOL resources?

Environment

Component : Top Secret for z/OS

Resolution

The JESSPOOL resource name format is as follows:

JESSPOOL(nodename.userid.jobname.jobid.dsidentifier.name)

Example: The following PERMIT limits authority to the JESSPOOL resource to a specific node SYSA with a userid of 'JOE':

     TSS PER(JOE) JESSPOOL(SYSA.ESP)  ACCESS=ALL

Additional qualifiers, (such as jobname, jobid, dsidentifier, etc..) can be added to the resource name to further limit access to JESSPOOL resources.