JZOS batch execution question

[RedSox]

Is any way to have the JZOS command(s) be executed as a different user than the submitter of the JCL stream?
Example: user TEST01 submits JCL with a a JZOS step. JZOS step executes java program HelloWorld as user TEST02.

[john.mckown]

The only what that I know of to do this is if user TEST01 either has RACF SURROGAT authority to submit a job with USER=TEST02 on it with no password. Or user TEST01 knows user TEST02's password and uses both the USER= and PASSWORD= parameters on the JOB card. This runs the entire job with user TEST02, not just the JZOS step.

From some reading, you might be able to use JAAS to run as another user. Read http://www-03.ibm.com/servers/eserver/z ... /jaas.html