the job in 'TFED.RND1(GSAS) is abended with return code as SEC ERROR
the message is
Code:
LOGON/JOB INITIATION - SUBMITTER IS NOT AUTHORIZED BY USER
i tried by removing USER=TFEE, NOTIFY=TFEE, now the job is submitted by CICS region name S1DCIC0T... (ie. Owner = S1DCIC0T) but i want to have owner as my id (owner = TFEE)
how Can we override the submitter name
Joined: 23 Nov 2006 Posts: 19244 Location: Inside the Matrix
Hello,
As your id is not permitted (hence the security violaton), you would need to talk with the security admins or the people who provide "the rules" to the admins. You might also ask your CICS support people if there is some other way to do what you want.
You are now stuck with policy rather than technology
If you want the owner as TFEE you can override System init parameter (SIP) DFLTUSER=TFEE in CICS. Since the System init table is built using DFLTUSER=S1DCIC0T during CICS installation. the job is started with the mentioned owner. You can override it in SYSIN ddname.
You are getting error message "LOGON/JOB INITIATION - SUBMITTER IS NOT AUTHORIZED BY USER" because you have not provided the password in Jobcard.
Your job will be successfully submitted for the below jobcard. Please provide the password in XXX
//TFEEJB1 JOB TP,EXEC025,
// CLASS=M,
// MSGCLASS=A,MSGLEVEL=(0,0),
// REGION=7M,NOTIFY=&SYSUID,USER=TFEE,PASSWORD=XXX
The job will be submitted by the USER TFEE who has the authority to START the CICS. But the CICS job will start with the Default User defined in SIT or overriden in SIP.
Joined: 23 Nov 2006 Posts: 19244 Location: Inside the Matrix
Hello,
Quote:
The job will be submitted by the USER TFEE who has the authority to START the CICS
It may or it probably will not.
This is prohibited in most places. Developers/others are not permitted to "spoof" other (production) user-ids in most cases. It is a poor security implementation that allows "just anyone" to be some other user. . .
If this works on your system, i suspect security is rather weak.
.jpg)
