An EXCI connection defined in CICS with ATTACHSEC = LOCAL allows users to access the system even though they don't have access to that region.