How to provide selective access to CICS transactions?

kkrishnakanth · New User Joined: 27 Oct 2007 Posts: 7 Location: India

In our application - we have an CICS screen for application error log. Same screen also provide facility to restart a failed messages.

We want all person under our Racf group to browse the screen - but want only selected people have access to restart.
Could you please suggest - how to code application cobol program to achieve this?

enrico-sorichetti · Posted: Tue Nov 06, 2007 6:38 pm

Earl · Posted: Wed Nov 07, 2007 8:34 am

perform an

exec cics assign userid

and allow processing according to USERID

kkrishnakanth · New User Joined: 27 Oct 2007 Posts: 7 Location: India

when we use 'exec cics assign userid ', we get the RACF id of the user who has initiated the transaction, but after this step i want to check whether the user belongs to a particular RACF group or not. how can i achieve this using CICS? could you please suggest any thing?

enrico-sorichetti · Posted: Thu Nov 08, 2007 12:22 pm

I am still convinced that my suggestion is less troublesome..

any change in the users/groups would imply changing the program
to add/delete users/groups lists

with my suggestion once You have made the change checking only
one token ( the transaction code ) every other modification to the
access lists is external to your program

obviously a "CICS ASSIGN USER" is a more show off then a simple
"IF TRANCODE = ... :-)

Earl · Posted: Thu Nov 08, 2007 8:02 pm

to each his own::

Mickeydusaor · Posted: Sat Nov 17, 2007 2:09 am

You can access the ACEE from within you cics program and check
the assigned user id to the racf group in the ACEE and allow or
disallow based on your compare results.