Mr Farrel, Your comments were very helpfull. Actually there were an error in L-form of RACROUTE, where i was not specifying USERID field. Now it's working fine.
Thanks for your feed back. Atenciosamente/Regards/Saludos Ituriel do Nascimento Neto Banco Bradesco S.A. Suporte T�cnico - Software B�sico - Mainframes Tel: 55 11 4197-2021 Fax: 55 11 4197-2814 [EMAIL PROTECTED] -----Mensagem original----- De: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] nome de Walt Farrell Enviada em: quinta-feira, 26 de maio de 2005 13:41 Para: [email protected] Assunto: Re: RACROUTE with RC=00 If you omit the USERID parameter then you should always get RC=0 because you are checking your own authority, and PRIVILEGED will give the RC=0 for almost all AUTH calls. However, with the USERID parameter specified a check should occur against the specified user ID, and only if it matches the STC ID should PRIVILEGED apply. Thus, you should get the appropriate RC for that user ID (as long as it does not match the STC user ID). I suspect you have a coding error on your RACROUTE macro, or on the L-form macro, or in the way that you initialize the static copy of your macro (at label AUTHCHK). Or else you have an exit (e.g. ICHRCX01) that is not coded properly. However, without seeing more of the code I can't tell for sure. Walt Farrell, CISSP z/OS Security Design, IBM ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html AVISO LEGAL <BR> Esta mensagem � destinada exclusivamente para a(s) pessoa(s) a quem � dirigida, podendo conter informa��o confidencial e/ou legalmente privilegiada. Se voc� n�o for destinat�rio desta mensagem, desde j� fica notificado de abster-se a divulgar, copiar, distribuir, examinar ou, de qualquer forma, utilizar a informa��o contida nesta mensagem, por ser ilegal. Caso voc� tenha recebido esta mensagem por engano, pedimos que nos retorne este E-Mail, promovendo, desde logo, a elimina��o do seu conte�do em sua base de dados, registros ou sistema de controle. Fica desprovida de efic�cia e validade a mensagem que contiver v�nculos obrigacionais, expedida por quem n�o detenha poderes de representa��o. +******+ LEGAL ADVICE <BR> This message is exclusively destined for the people to whom it is directed, and it can bear private and/or legally exceptional information. If you are not addressee of this message, since now you are advised to not release, copy, distribute, check or, otherwise, use the information contained in this message, because it is illegal. If you received this message by mistake, we ask you to return this email, making possible, as soon as possible, the elimination of its contents of your database, registrations or controls system. The message that bears any mandatory links, issued by someone who has no representation powers, shall be null or void. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
