This topic explains how to allow batch jobs to run under
credentials of the user when WebSphere® security
is enabled.
About this task
The RUN_JOBS_UNDER_USER_CREDENTIAL variable allows users
to enable or disable batch jobs to run under credentials of the user.
When the job is dispatched to the endpoint, the batch container switches
the credentials of the server to the credentials of the user. The
credentials of the server are in the job step thread.
Note:
RUN_JOBS_UNDER_USER_CREDENTIAL
can be created at any scope level and accepts values true or false.
The default is false, which means that batch jobs run under server
credentials.
When Java™ 2
Security is enabled, your
batch applications
must grant the following two permissions in the WebSphere Application Server.policy file
of the application:
- permission com.ibm.websphere.security.WebSphereRuntimePermission
"SecOwnCredentials"
- permission com.ibm.websphere.security.WebSphereRuntimePermission
"ContextManager.getServerCredential"
The following steps describe how to create the custom
property to enable or disable batch jobs to run under the credentials
of a user after logging on to the administrative console: