Allow certain ACF2 users to change their logon proc at TSO signon

Products

• ACF2 - z/OS

Issue/Introduction

Certain users need to be able to specify their LOGON PROCEDURE (proc)  at TSO (TIME SHARING OPTION) signon.  

Some of those users have LOGONIDs showing the LGN-PROC attribute, but the full-screen TSO logon menu is not presented and no change can be made to the LOGON PROCEDURE.  There are other users that have had this ability for a long time.  

What causes this? 

From a display of a LOGONID that is presented the full-screen TSO logon menu:

TSO                  ACCTPRIV ALLCMDS CMD-LONG DFT-PFX(xxxxxx) DFT-SOUT(X)    
                      DFT-SUBC(Z) DFT-SUBH(X) DFT-SUBM(X) INTERCOM JCL LGN-ACCT
                      LGN-PERF LGN-PROC LGN-RCVR LGN-SIZE LGN-TIME LGN-UNIT    
                      MAIL MSGID NOTICES OPERATOR PAUSE PROMPT RECOVER        
                      TSOACCT(0000) TSOFSCRN TSOPROC(procxxx) TSORBA(000480)  
                      TSORGN(2,000,000) TSOSIZE(2,000,000) WTP       

From a display of a LOGONID that is not presented the full-screen TSO logon menu:

TSO                  DFT-PFX(yyyyyy) DFT-SOUT(X) DFT-SUBC(Z) DFT-SUBH(X)       
                     DFT-SUBM(X) INTERCOM JCL LGN-PROC LGN-SIZE MAIL MSGID    
                     NOTICES PROMPT TSOACCT(0000) TSOPROC(xxxxxxx)            
                     TSORBA(000414) TSORGN(2,500) TSOSIZE(1,000) WTP  

 

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

NOTE: TSOFSCRN|NOTSOFSCRN only controls whether a logonid in use is presented the full-screen logon display or not. It does not control whether a user can enter a TSO PROC or if the access to the TSO PROC is checked.

NOTE that TSO PROC refers to the PROC(xxxxxxx) parameter that can be entered after LOGONID as part of the response to  message 

ACF82003 ACF2, ENTER LOGON ID - logonid PROC(procname).

From the page Logonid Record Fields, these are the LOGONID fields that allow access to the other procs without TSOFSCRN screen options:

These are the TSO PROC logonid fields related to TSO logons:

*PMT-PROC|NOPMT-PROC
Indicates that ACF2 logonid in use must specify a TSO procedure name at logon time. LGN-PROC Bit field must be set also. If you also specify the FSRETAIN field in the GSO TSO record, ACF2 does not prompt for a procedure name. FSRETAIN obtains the procedure name from the last session. (Bit field)
Logonid Record Section: TSO

*LGN-PROC|NOLGN-PROC
Indicates the logonid in use has permission to specify the TSO procedure name at logon time. (Bit field)

*TSOPROC(procname)
Indicates an eight-character default TSO procedure name.

VLD-PROC|NOVLD-PROC
Indicates that ACF2 validates the TSO PROC name specified by a user. A resource rule must be created with a type code of TPR and a $KEY of the procedure name so that ACF2 performs this validation. (Bit field)