Prevent TWS job creation if streamlogon ID is root

Answer

Utilize the dumpsec command to create a text file that has the current security stanzas.

$ dumpsec > mysec

Modify the resultant file and add an entry that specifies that a job cannot be created with the logon id of root.

job cpu=@+logon=root access=display

Use the makesec command to put the new security file into effect.

$ makesec mysec

Attempt to create a job with the streamlogon id set to root and the result should look like this:

"/opt/IBM/TWA/TWS/tmp/TWSUgsnqa", line 8: **ERROR**(7) AWSDEJ005E

The error message returned is:

"AWSJCO026E User "twsuser" is not authorized to perform the action "ADD" on an object "Job" and key "jd=MDM#NOROOT".

NOTE: This solution is only to prevent a job from being inserted into the database if the streamlogon id is set to root.. If there is a job with root as the streamlogon id in the database already then this change will not prevent that job from being added to the plan or from being adhoc submitted into the plan.