search cancel

Clearing a CICS screen allows a user to enter an ACF2 protected tranasation.

book

Article ID: 203082

calendar_today

Updated On:

Products

ACF2 ACF2 - z/OS ACF2 - MISC

Issue/Introduction

What is happening is from a sign on screen if a user clears it and is not logged on then a CEMT command can be issued.

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

Adding the ACF2/CICS option in the SIGNON record of REQUIRE=YES will require the users to be signed on to enter all transactions except for a SAFELIST transaction.

SIGNON  Require=YES|NO

Determines whether CA ACF2 requires each individual CICS user to sign-on to execute transactions.

YES-Specifies that a user must sign-on before executing transactions.
NO-Specifies that no sign-on check is made.
Note: Transactions on the SAFELIST are executed regardless of the specification of this keyword. Transactions executed on implicitly signed-on terminals are also excluded from this test.

Additional Information

For more information on the SIGNON record in the ACF2/CICS interface, go here: