Security Considerations › Data Set Security Checking

Data Set Security Checking

The CA XCOM Data Transport CICS interface performs no data set security validation. It allows the CA XCOM Data Transport server to perform all validation. Whenever the CA XCOM Data Transport CICS interface schedules a file transfer request, the CA XCOM Data Transport server validates the user's local data set access authorization. The CA XCOM Data Transport CICS interface passes the local user ID and encrypted password to the CA XCOM Data Transport server, where the user ID/password combination is first validated. Assuming that the user ID/password is valid, the CA XCOM Data Transport server then validates whether the user is authorized to access that data set.

If the request is to send or receive a data set, the remote CA XCOM Data Transport partner also authorizes access to the remote data set. The CA XCOM Data Transport CICS interface passes the remote user ID and encrypted password to the CA XCOM Data Transport server. When the file transfer is initiated, the CA XCOM Data Transport server passes the remote user ID/password to the remote system, where it is validated along with the user ID's authorization to access the remote data set.

Note: The local user ID/password does not have to be the same as the remote user ID/password. Because different fields are available for local and remote user ID/password, they can be different.

If the local user ID/password or remote user ID/password are not entered, The CA XCOM Data Transport CICS interface passes default values to the CA XCOM Data Transport server. The following section describes how CA XCOM Data Transport treats user ID propagation.