In RACF you can limit the ability to cancel a job based on who submitted the job as long as its done via SDSF.
With the following statement:
PERMIT JES2.CANCEL.BAT CLASS(OPERCMDS) ID(*) ACCESS(UPDATE) WHEN(CONSOLE(SDSF)
Is there a way to provide similar access in Top Secret?
Release : 16.0
Component : Top Secret for z/OS
JESJOBS provides the solution.
TSS ADD(dept) JESJOBS(CANCEL) establishes the resource ownership at the department level
TSS PER(user01) JESJOBS(CANCEL.*.user01) ACCESS(READ) give user01 the permit to cancel only his jobs on any node
TSS PER(profile) JESJOBS(CANCEL.*.%) gives any user (mask '%') the permit to cancel their jobs only on any node
Placing the second permit in a profile so it can be added to any user without having to directly permit it to