We are getting a $HASP003 RC=(148) - Job class not authorized for operator or Job Owner when attempting to change job class on master console. We upgraded to z/OS 2.03 in July. We have a test system that still has z/OS 2.01 and we can change the job class on the master console there with no problems.
IBM added jobclass validation with z/OS 2.1. You might have different rules on the different systems. Check your violation report for the security product. If nothing there, you would need to trace the SAF calls to see what is validated.
We ran reports and no violations were there for this issue. We ran a trace for the SAF calls and it looks like we have the appropriate rules setup. One of my coworkers opened a ticket (01275257), the trace report was included.
You can look at technical document KB000028806 at the below link:
z/OS 2.1 JES2/JES3: SAF Check for Job Input Class - CA Knowledge Cheers,