Implementing Security for Batch › Explicit Password Specification

Explicit Password Specification

If explicitly specifying the password on the JOB statement is acceptable from a security standpoint, this can be done using the PASSWORD= keyword as shown in the following example.

//REPORT JOB (ACC158),USER=TCH707,PASSWORD=G3T1Q

Explicit password specification on JOB JCL statements is a security exposure. Exposures occurs as part of your JCL library, which may be accessed unauthorized, and as spool data.

When JES(VERIFY) is specified:

• If a USER is present in the JOB statement the USER is checked to see if submitter is cross-authorized
• If submission is allowed password processing does not take place unless the password is explicitly coded