Security considerations

When utilizing the SUBMIT function of the on-line AutoEdit Simulation utility the job is submitted on behalf of the TSO user (provided that the TSO user is so authorized), and not the OWNER in the job definition (Scheduling Mode) or the utility input parameters (JCL Mode). Since the on-line environment is not APF-authorized (unlike the Control-M monitor), the security exit can only check the RACF authorization of the TSO user performing the request.

When a auto-edit simulation job is submitted from the on-line, the OWNER field is not relevant, except for supplying a value for occurrences of the %%OWNER AutoEdit parameter in the JCL stream.