IBM Mainframe Forum

Has anyone tried switching the TSO/RACF userid in the middle of a rexx execution? Here's why I need to do this: Half way into processing my rexx, I need to execute some DB2 commands under a different racf userid that has been granted appropriate Db2 privileges.

Thanks,
David

Hello and welcome to the forum,

What a horrible idea. . . This would violate the security policy of any organization. . .

If you believe there is a business reason for you to issue restricted commands, you need to have your management upgrade your permissions.

Hi Dick:
Thanks for getting back to me.

I know, the idea sounds odd and cumbersome, but the whole business reason is about "control on certain priviledged db2 maintenance functions". When it comes to executing one of these privileged DB2 functions, no developer is allowed to do it except for the powerful racf userid whom I'm trying to switch/surrogate to in my rexx.

Appreciate your feedback, and I'll keep researching into a workaround.

Regards,
David.

Hello,

the idea sounds odd and cumbersome

No, just wrong. Many/most developers believe they should also be able to do whatever they want

no developer is allowed to do it

Of course not. . . Which is quite normal.

I'll keep researching into a workaround.

"Beating the system" is grounds for termination many places. . .

If there is truly a business reason ("I want" is not a business reason) speak with your management to have your id upraded.