Use of the //*JOBFROM does not update logonid ACC-SRCE field

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

We have several Logonids that are submitted by our automated scheduling software using the //*JOBFROM statement. Why is the logonid ACC-SRCE field not being updated?

The //*JOBFROM statement lets a job run under a logonid different than that of the submitter, without the submitter providing a password.

 

Environment

Release: 16.0
Component: ACF2MS

Cause

The logonid ACC-SRCE field is not updated for logonids for jobs that use the //*JOBFROM statement,.

Resolution

Use of the JOBFROM statement bypasses PASSWORD, RESTRICT, PROGRAM, SUBAUTH and SOURCE logonid checks (restrictions). Use of the JOBFROM will only update the last access fields ACC-CNT, ACC-DATE, and ACC-TIME of the logonid once a day (the first use). The last access ACC-SRCE field will not be updated.

Details on the use of //*JOBFROM statement can be found in ACF2™ FOR Z/OS 16.0 : JES Security : JCL Extensions : //*JOBFROM

 

Additional Information

MAR 2023 - reformatted, title shortened