CICS does not run your transactions under your signon userid. They run under 
the CICS address space ID, with its authority. So IRRSEQ00 simply looks for an 
ACEE in TCBSENV and if it does not find one, it used ACSBSENV.
Hence your result.

Lennie Dymoke-Bradshaw
https://rsclweb.com 
‘Dance like no one is watching. Encrypt like everyone is.’

-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of 
John Blythe Reid
Sent: 20 April 2023 16:13
To: [email protected]
Subject: Call to RACF R_admin from CICS module

Has anyone used RACF callable services from a CICS module ?

This is the call to the R_admin interface:

CALL IRRSEQ00 (Work_area,
                                ALET, SAF_return_code,
                                ALET, RACF_return_code,
                                ALET, RACF_reason_code,
                                Function_code,
                                Parm_list,
                                RACF_userID,
                                ACEE_ptr,
                                Out_message_subpool,
                                Out_message_strings
                                )
I use this function:      ADMN_RUN_COMD    X'05'    Run a RACF command image

The command string that I give it is simply 'LU' to list my RACF user. The call 
works ok but to my surprise, rather that listing my user it lists the CICS 
region user. This despite having logged on to my CICS session with my userid.

The manual clearly states that the parameters RACF_userID and ACEE_ptr are 
ignored for problem state callers.

By the way, when I make this same call from a batch program it works ok, 
returning the RACF information for my userid.

Has anyone else come across this ?

Regards,
John Blythe Reid.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
[email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to