The system-wide co-administration rights of the user TSOS can be restricted. Files and job variables are subject to these restricted co-administration rights. It is thus possible to achieve the following objectives:
A user under the user ID TSOS can only administer a definable set of files and job variables belonging to other user IDs. The protection attributes of this set can only be changed by the object owner or co-owners specified by the object owner.
For dialog and batch tasks that run under the user ID TSOS, the TSOS coadministration rights are checked and may be rejected.
For system tasks that are equipped with the TSOS privilege, no checks are carried out on the TSOS co-administration rights. In this way, normal system operation can be maintained. We therefore refer below to a restricted TSOS co-ownership.