PROTECTED Attribute With SURROGAT ACIDs In Top Secret

Products

• Top Secret

Issue/Introduction

When looking to remove NOPW from ACIDs that currently have it, will SURROGAT ACIDs work with the PROTECTED attribute? SURROGAT meaning ACIDs that are permitted to other ACIDs (TSS PER(acid) ACID(suracid) ) so the "acid" can submit batch jobs with USER=suracid, where ‘suracid’ is the SURROGAT acid. 

Environment

Release : 16.0

Resolution

Yes. You can remove the NOPW and add the PROTECTED attribute to the SURROGAT acid.

For example:
TSS REMOVE(suracid) PSWDDATA
TSS REMOVE(suracid) PHRASDATA
TSS PERMIT(acid) ACID(suracid) 

With 'suracid' PROTECTED, an 'acid' that is permitted to 'suracid' can submit a job with USER=suracid and the job should run successfully.

NOTE: The PROTECTED acid can not signon, pull up jcl, and then submit that jcl. However, a protected acid that is the started task acid for a started task that submits jobs, such as CA-7, can submit the jobs from that started task as long as started task ACID is cross authorized to the ACID in the USER= on the job card.