Restricting Job Cross Streaming [ HP Security Monitor/iX User's Guide ] MPE/iX 5.0 Documentation
HP Security Monitor/iX User's Guide
Restricting Job Cross Streaming
To preserve accountability of each individual user, the security
administrator will be able to disallow cross streaming. This prevents a
person without SM or AM (of the appropriate account ) from streaming jobs
that log on as another person.
The Cross Streaming Authorization Option
Since these rules may be too restrictive in some situations, an exception
to the rule is provided in the form of the Cross Streaming Authorization
option. If your system manager has selected this option, it allows
limited cross streaming on certain protected jobs.
A protected job is defined as a job that is streamed from a permanent
file and logs on to the same user as the creator of the file. The job is
protected in the sense that the job owner (user accountable for the job)
also controls the file (as its creator).
A user, other than the System Manager, Account Manager, and the job
owner, is authorized to stream a protected job when:
1. The user has EXECUTE access to the job file, and
2. The security administrator has enabled the Cross Streaming
Authorization feature.
When a job submission attempt violates the cross streaming restriction,
the following error message is returned to the user:
CROSS STREAMING IS DISALLOWED. JOB STREAM ATTEMPT FAILED
(CIERR 1440).
MPE/iX 5.0 Documentation