HP 3000 Manuals

Restricting Job Cross Streaming [ HP Security Monitor/iX User's Guide ] MPE/iX 5.0 Documentation


HP Security Monitor/iX User's Guide

Restricting Job Cross Streaming 

To preserve accountability of each individual user, the security
administrator will be able to disallow cross streaming.  This prevents a
person without SM or AM (of the appropriate account ) from streaming jobs
that log on as another person.

The Cross Streaming Authorization Option 

Since these rules may be too restrictive in some situations, an exception
to the rule is provided in the form of the Cross Streaming Authorization 
option.  If your system manager has selected this option, it allows
limited cross streaming on certain protected jobs.

A protected job is defined as a job that is streamed from a permanent
file and logs on to the same user as the creator of the file.  The job is
protected in the sense that the job owner (user accountable for the job)
also controls the file (as its creator).

A user, other than the System Manager, Account Manager, and the job
owner, is authorized to stream a protected job when:

   1.  The user has EXECUTE access to the job file, and

   2.  The security administrator has enabled the Cross Streaming
       Authorization feature.

When a job submission attempt violates the cross streaming restriction,
the following error message is returned to the user:

     CROSS STREAMING IS DISALLOWED. JOB STREAM ATTEMPT FAILED
     (CIERR 1440).



MPE/iX 5.0 Documentation