The security parameter list passed to this exit is mapped by macro TLMWSECP, and is addressed by SECUPARM in the supplied sample exit. This parameter list is complete and is ready to be parsed and passed to the system security component on return from this exit call. This exit can view all the values in this list, and some can be altered to provide flexibility with different system security packages. For example, the SECOPN system option (check data set access at OPEN) is set to YES, and the security call is at data set creation. The access type byte (SCPACC) will have a value of X'20', indicating create access. This may, in fact, not work for the data set rules that have been coded for the installed security system, and may have to be altered to X'08' (SCPAUPD) for update.
Global security flags can be viewed or altered by the exit.
X'40' - suppress event logging
X'20' - process security messages
X'10' - abend, security violation
Security call function request
Access requested (default access is always READ), function request 3 only.
Resource length, function request 3 only.
Address of requesting user ID.
Address of user password
Address of new user password
Address of terminal ID. This may or may not be available at user exit call time. Test for zeros before using contents as an address.
ACEE/ACMCB. This may or may not be available at user exit call time. Test for zeros before using contents as an address.
Address of resource name if function call is 3.
Address of resource class name if function call is 3.
Address of program name if function call is 3.
Address of virtual terminal name if function call is 1. This may or may not be available at user exit call. Check for valid address.
Address of re-verify password if function call is 7.
Address of volume serial number if function call is 3 and resource is DSN.
Calling routine ID as one of the following: OPEN, CLSE, TLTP, CMND, BTCH (batch).
The above fields or addresses may be viewed, if present, and will depend on the type of security call in progress. Address pointers should be checked for zeros, in which case no value was supplied and there is no default. Although it is recommended that none of these values be altered, changes to some may be desirable (for example, resource class name). Contact CA TLMS Technical Support when considering these types of changes.
This user exit should be assembled and linked through SMP USERMOD. An example of the JCL is located in CAI.CTAPJCL (TLMJU015).
This exit is activated by specifying YES for the SECEXIT system option.
|
Copyright © 2014 CA.
All rights reserved.
|
|