IBM Mainframe Forum

Hi all,
I am Mehrdad rastgar from Bank Mellat,IRAN.
In TSO/E logon screen, How i can protect the "command" field ?

(i tried USER.TSO.TCOMMAND and USER.TSO.* profiles in FIELD class in racf. now users cannot change their command from tso options in racf.but they can change their command field from their logon screen easily and enter with another command !!!)

any helps could be appreciated.

best regards,
Mehrdad

Change the panel definition to remove that field

Hi,

You mean "sys1.samplib(ikjapenu)" or somewhere else?



best regards

Well, if you do not know then it probably is not you sphere of activity.

Not sure what IKJAPENU is... I only found (IKJLPENU) in my samplib, as described in TSO/E Customization manual.

As an alternative, perhaps use the post-display exit IKJEFLN2. It gets control after the user provides the password and presses Enter. I believe you can blank out the command text before it gets executed.

See "Writing a logon post-display exit (IKJEFLN2)" in the TSO/E Customization manual. In fact, you should read the entire chapter 8.