Security Considerations › CICS Operator Security

CICS Operator Security

There are three types of operator security in the CA XCOM Data Transport CICS interface. These are defined in the CA XCOM Data Transport configuration member, XCOMCNFG. Note that this definition is not performed in the CA XCOM Data Transport CICS interface configuration. It is defined by the OPERSEC parameter, which has three possible values:

NONE

There is no security on CA XCOM Data Transport operator control functions. Any user can display any CA XCOM Data Transport file transfer. Any user can also perform operator control functions on any CA XCOM Data Transport file transfer. This includes deleting, altering, and suspending CA XCOM Data Transport transfers.

USER

Users can display, or perform operator control functions on, any CA XCOM Data Transport scheduled transfer that they initiated. The CA XCOM Data Transport CICS interface passes the CICS user ID, with which the user logged onto CICS, to the CA XCOM Data Transport server. CA XCOM Data Transport then verifies that the user ID that CICS passed matches the transfer LUSER parameter (local user ID) before allowing a display or update function for that transfer.

OPER

The OPER entry is functionally equivalent to the USER entry with one additional capability. Users that are defined by CA Top Secret with OPER capability can display, or perform operator control functions on, all transfers without regard to the user ID with which they logged onto CICS or CA Top Secret.

Note: All the CA XCOM Data Transport CICS interface functions that use the authorized CA XCOM Data Transport transaction (default XCON) get the equivalent of TSO OPER functionality.