Top Secret ACIDAUTH Resource Class

Products

• Top Secret

Issue/Introduction

What is the Top Secret Resource Class 'ACIDAUTH' used for?

Resolution

The ACIDAUTH Resource Class is used for Cross Submit Authorization Checking. It is used to determine, if a submitting ACID is authorized to submit a job using a different ACID .

A security call against ACIDAUTH class is always issued, whether USER= is specified or not on JOB card.

The SAFTRACE excerpt below details the security call:

CAS21D0I TRACEID: TRACE001 EVENT#:  00302431
CAS21D0I JOBNAME: USER001  USERID:  USER001  ASID: 0044
CAS21D1I PROGRAM: IKJEFF04 RB CURR: IKJEFF04 APF:  YES  SFR/RFR: 0/0:0
CAS2200I RACROUTE REQUEST=AUTH,REQSTOR='TSSJJINT',SUBSYS='CA-TSS',
CAS2200I          CLASS='ACIDAUTH',RELEASE=1.9,STATUS=NONE,ACEE=,
CAS2200I          ATTR=READ,DSTYPE=N,DECOUPL=YES,
CAS2200I          ENTITY=('USER001...............................'),
CAS2200I          FILESEQ=0,GENERIC=ASIS,LOG=ASIS,MSGSP=0,TAPELBL=STD,
CAS2200I          WORKA=

• The TSSJJINT is designed to check if the submitting ACID is authorized to the ACID being used in the batch job.
  
  
• The security check is against the ACIDAUTH resource class.
  
  
• When submitting using an ACID that has the bypass attribute NOSUBCHK, the event is logged into the Audit Tracking File (ATF).

Additional Information

Implementing in CICS and Other Interfaces