Clearing a CICS screen allows a user to enter an ACF2 protected transaction

Products

• ACF2
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

What is happening is from a sign on screen if a user clears it and is not logged on then a CEMT command can be issued?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

Adding the ACF2/CICS option in the SIGNON record of REQUIRE=YES will require the users to be signed on to enter all transactions except for a SAFELIST transaction.

SIGNON  Require=YES|NO

Determines whether CA ACF2 requires each individual CICS user to sign-on to execute transactions.

YES-Specifies that a user must sign-on before executing transactions.
NO-Specifies that no sign-on check is made.

Note: Transactions on the SAFELIST are executed regardless of the specification of this keyword. Transactions executed on implicitly signed-on terminals are also excluded from this test.

Additional Information

For more information on the SIGNON record in the ACF2/CICS interface, please see SIGNON-Sign-on Control Options in the ACF2 documentation.