On the MF, I now have 2 types of files: 1) classic MVS files, and my JCL says DSNAME= 2) Unix file know as HFS (Hierarchical File System) and my JCL says: PATH= on USS I have access to: my Home Directory (/u/) I can create files here, I can deploy Java code here, etc. any other location, I need permission. I can see permission via the USS command 'ls -l' here is a sample output from ls -l command: -rw-r-xr-- USER900 SYS1 1152 MAR 15 12:33 sample.jar here is how to read this line: -rw-r-xr-- USER900 SYS1 1152 MAR 15 12:33 sample.jar ^ this first byte is a flag telling me what find of an etry I am looking at: - <- a regular file d <- a directory -rw-r-xr-- USER900 SYS1 1152 MAR 15 12:33 sample.jar ^^^^^^^^^ permissions in sets of 3 first set <- Owner permissions second set <- Group permissions thrid set <- Public permissions -rw-r-xr-- USER900 SYS1 1152 MAR 15 12:33 sample.jar ^^^^^^^ the Owner of this file/directory -rw-r-xr-- USER900 SYS1 1152 MAR 15 12:33 sample.jar ^^^^ the Group of users -rw-r-xr-- USER900 SYS1 1152 MAR 15 12:33 sample.jar ^^^^ file size -rw-r-xr-- USER900 SYS1 1152 MAR 15 12:33 sample.jar ^^^^^^^^^^^^ modification Date time -rw-r-xr-- USER900 SYS1 1152 MAR 15 12:33 sample.jar ^^^^^^^^^^ file/dir name ----------------------------------------------------------------- -rw-r--r-- USER900 SYS1 1152 MAR 15 12:33 sample.jar Owner has: rw- Group has: r-x Public has: r-- here is what these symbols mean: File Direcory r (read) - I can read this file I can get a directory listing w (write) - I can delete/edit/rename I can create/delete sub-directories or I can move a file into this dir x (executable) - I can run this file I can cd (change dir) into this dir I need: read permission to the jar to access 3rd party frameworks, I also need read permission to the directory those frameworks are in, I also need read permission to ALL the parent directory all the way up to root USS support 2 special permissions, and these can be a security risk: SETUID -> Set User ID, if this is turned on, the job running is running as if the Owner submitted it. If root owns this job then the job is running with root permission, and this could be VERY bad SETGID -> Set Group ID, if this is turned on, the job running is running as if the Group submitted it.