On 7/5/2006 4:35 PM, Crabtree, Mark wrote:
Is there a way to obtain a copy of the ACEE for a user (not the current user)
from within CICS? I am using 'EXEC CICS ADDRESS ACEE(R12)', but this just gets
me the ACEE of the current user. I would like to be able to do this for a user
other than the one running the transaction in order to get a user's name and
connected groups.
I won't pretend to have much CICS expertise, and so I hesitate to
suggest this since John Chase did not, but how about having your
transaction start another transaction to run under the ID you want to
query, and have that second transaction return the data to you somehow?
I believe the starting of the new transaction should prove simple to do,
but I don't know the mechanics of having the second transaction return
information.
I will comment that I usually consider it an application design flaw
whenever I see an application that wants to know anything about a user's
group connections. I believe that group connections should only matter
to the security administrator, not to an application. Otherwise when
(not if) the administrators change the group structure or names someone
has to find the affected applications and recode them.
Walt Farrell, CISSP
z/OS Security Design (but CICS neophyte), IBM
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
