z/OS User Exits › z/OS Server User Exits—CICS › TIRSECRX—Security Interface Exit › Customizing the Exit

Customizing the Exit

This exit is called by both cooperative and non-cooperative applications.

The cooperative Server Manager calls the Security Interface Exit when a transaction is started. The Server Manager also calls TIRSECVX to provide application-level security. On a Server-to-Server flow, both exits are also invoked. The TIRSECRX exit can be used to check if the current application has authority to invoke the target server trancode.

For cooperative applications, the TIRSECR-USERID is the userid the server transaction is executing under which may or may not be different from the CLIENT_USER_ID sent by the client application.

Modify the exit to perform security checking as required by the application. Ensure that TIRSECR-RETURN-CODE is set to spaces when the security check is successful or some other value to indicate failure. If a message describing the violation is returned in TIRSECR-FAILURE-MSG, the Server Manager will pass it to TIRELOGX.