Came across something odd (see also: haven't been keeping up with CICS
updates like I should). I'm trying to secure the VCICSCMDs, using a grouping
structure that (almost) logically segregates the commands, viz:
LVL 1 - INQUIRY-ONLY COMMANDS - TECHNICAL SUPPORT USER
LVL 2 - DB2 COMMANDS - DATABASE TECHNICAL SUPPORT USER
LVL 3 - TERMINAL-MONITOR-TCPIP COMMANDS - TECH SUPPORT
LVL 5 - GENERAL USAGE COMMANDS - TECHNICAL SUPPORTUSER
LVL 6 - EXEC CICS-LEVEL COMMANDS - TECH SUPPORT USER
LVL 7 - CEMT CICS-LEVEL COMMANDS - TECH SUPPORT USER
LVL 8 - HIGH-END TECH SUPPORT ONLY COMMANDS - TECH SUP
LVL 9 - SECURITY ONLY COMMANDS - SECURITY DEPT ONLY
However, when going through the list, which is a few years old, I found that
some new items had been added, viz:
CEMTCOMMAND GRP
------------- ---
DLIDATABASE ?
IRBATCH ?
JOURNALNUM ?
PITRACE ?
RECONNECT ?
VOLUME ?
So far, I've had some problems 1) finding these CICS Commands and 2)
sorting out where they would belong in the structure. I'd rather not create a
new category (LVL 4 - DUHHHHHHHHHHHHHHHHHHH - TECHNICAL SUPPORT
USER) but instead integrate the new commands into existing levels. I'm
guessing that JOURNALNUM would probably fit into LVL 5 (right under
JOURNAL) but beyond that I'm stumped.
CEMTCOMMAND GRP
------------- ---
BEAN 1
CFDTPOOL 1
EXCI 1
MVSTCB 1
RRMS 1
STORAGE 1
STREAMNAME 1
SUBPOOL 1
UOWDSNFAIL 1
UOWENQ 1
DB2CONN 2
DB2ENTRY 2
DB2TRAN 2
CONNECTION 3
IRC 3
MONITOR 3
TCPIP 3
TCPIPSERVICE 3
TERMINAL 3
TSMODEL 3
TSPOOL 3
TSQNAME 3
VTAM 3
WEB 3
AUTINSTMODEL 5
AUTOINSTALL 5
BRFACILITY 5
CORBASERVER 5
DELETSHIPPED 5
DISPATCHER 5
DJAR 5
DOCTEMPLATE 5
DSNAME 5
DUMPDS 5
ENQMODEL 5
FILE 5
JOURNAL 5
JVMPOOL 5
MODENAME 5
PARTNER 5
PROFILE 5
PROGRAM 5
REQUESTMODEL 5
SYSDUMPCODE 5
SYSTEM 5
TASK 5
TCLASS 5
TDQUEUE 5
TRANDUMPCODE 5
TRANSACTION 5
UOW 5
EXITPROGRAM 6
REQID 6
STATISTICS 6
TRACEDEST 6
TRACEFLAG 6
TRACETYPE 6
TSQUEUE 6
DUMP 7
JOURNALMODEL 7
LINE 7
PROCESSTYPE 7
UOWLINK 7
FEPIRESOURCE 8
LSRPOOL 8
MAPSET 8
PARTITIONSET 8
RESETTIME 8
SESSIONS 8
SHUTDOWN 8
TYPETERM 8
SECURITY 9
I'd appreciate any advice or suggestions you might wish to make. Please note
this has been cross-posted over at RACF-L and CICS-L (to an oddly echoing
silence, unfortunately).
Many thanks.
Doc Farmer
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
