Security and user exits

Security exit CTMSE06 and user exit CTMX006 are used to verify that the specified user is allowed to submit scripts and commands on the specified host.

The $$STRDS.qname.ds_user.hostname security entity must be defined for a user to be given the permission for submitting scripts. Host name in the entity must be an actual host name, which is listed in the DSHOSTS table.

All entities must be defined in the SAF (System Authorization Facility) class that accepts long entity names. The name of this class must be assigned to the IOAXCLAS parameter of the SECPARM member in the IOA PARM library. All entities must be defined in upper case.

For example, to permit a mainframe user, USERA, to submit scripts on a host, HOSTB, using a distributed systems user, DSUSERA, use the following commands:

• For RACF

  PERMIT $$STRDS.qname.DSUSERA.HOSTB  ACCESS(READ) ID(USERA) CLASS(XFACILIT)

• For TOP SECRET

  TSS PERMIT(USERA) IBMFAC($$STRDS.qname.DSUSERA.HOSTB) ACC(READ)

• For ACF2

  SET RESOURCE(CMF)

  COMP

  $KEY($$STRDS.qname.DSUSERA.HOSTB) TYPE(CMF) UID(USERA) ALLOW