Implementing Security for Batch › ACID Propagation

ACID Propagation

If USER= and PASSWORD= are omitted from the job card, JES propagates the submitting ACID to the job. JES associates the submitting ACID with the job and will not require a password on the job card.

Propagation functions as it does under previous JES releases; however, in a 3.1.3 environment JES will propagate the ACID across nodes. Therefore, it is possible to have a job submitted on one node and executed with the submitting ACID on a different node without having USER= or PASSWORD= appear on the job card.

By default, the ACID will propagate; however, by using the PROPCNTL resource class you can suppress ACID propagation, whether or not there are any permits for those resources. This is useful when jobs are submitted from a multi‑user online system and your site intends to prevent the region ACID from being associated with batch jobs submitted from the online system.

Examples: ACID propagation

This example suppresses propagation for any ACID starting with CICS:

TSS ADDTO(any acid) PROPCNTL(CICS)

This example allows propagation to occur after issuing the above command:

TSS REMOVE(anyacid) PROPCNTL(CICS)

This example suppresses all propagation:

TSS REPLACE(RDT) RESCLASS(PROPCNTL)
                 ATTR(DEFPROT)

This does not affect the normal CA Top Secret SUBACID processing.