How to protect the SJ command?

Products

• Cleanup
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

We want to remove the authorization of the SJ command in front of a job which has already run.

We cannot find this under SDSF documentation.

 

Environment

Release:
Component: AWAGNT

Resolution

 

To protect SJ you have to use JESSPOOL class as follows:

   Resource Name                          Class       Access    
    nodeid.userid.jobname.jobid.JCL        JESSPOOL     READ

Then e.g:

   TSS ADD(anydept) JESSPOOL(*.)    
    
    TSS PER(ALL) JESSPOOL(*.%) ACCESS(ALL)

These commands should allow any user to have all access to their own JESSPOOL resources and no access to others.