Resources › JESSPOOL Resource Class—Secure JES Spool Data Sets

JESSPOOL Resource Class—Secure JES Spool Data Sets

Valid on z/OS.

Use JESSPOOL to secures access to the JES spool data sets, both SYSIN and SYSOUT. JESSPOOL only applies to JES2 SP3.1.3 or higher, and JES3 SP3.1.3 or higher.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) JESSPOOL(oper,oper...)

Prefix length

Two to twenty‑six characters

Capacity of list

One to eight prefixes per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) JESSPOOL(prefix(es))

Prefix length

One to fifty‑three characters

Capacity of list

One to eight prefixes per TSS command

This keyword uses:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOHAS, and WHOOWNS
• The JESSPOOL ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The JESSPOOL ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• JESSPOOL(OWN) authority to ADD or REMOVE access of JES spool data sets from ACIDs
• JESSPOOL(XAUTH) authority to permit or revoke access to JES spool data sets

The administrator can:

• Specify the access levels: ALL, NONE, READ, CONTROL, and UPDATE. If ACCESS is not specified, CA Top Secret defaults to READ access.
• Use any of the following methods to control access to JESSPOOL: Expiration, Facility, Time/Day, and Actions.

Note: Only z/OS, ESA release 3.1.3 and above offer support for all resources.

Masking

The JESSPOOL resource class supports all masking characters.

Examples: JESSPOOL resource class

This example gives USER01 ownership of all JES spool data sets originating at node a, which is being routed through that node to another node (node b). The resource name that JES is validating is localnodeid.userid.jobname.jobid.dsnumber.dsname:

TSS ADDTO(USER01) JESSPOOL(USG203ME)

This example removes ownership:

TSS REMOVE(USER01) JESSPOOL(USG203ME)

This example permits users READ access of all of their own JES spool data sets from the node USG203ME:

TSS PERMIT(ALL) JESSPOOL(USG203ME.%)

This example revokes access:

TSS REVOKE(ALL) JESSPOOL(USG203ME.%)

A user needs authorization to view his output regardless of the originating node:

TSS PERMIT(ALL) JESSPOOL(*.%)

where the first qualifier (node) is any node but the second qualifier must match the userid.