XPCT
The XPCT system initialization parameter specifies whether you want CICS to perform started transaction resource security checking, and optionally specifies the name of the RACF resource class name in which you have defined the started task security profiles.
- XPCT={YES|name|NO}
- If you specify YES, or a RACF resource class name, CICS calls RACF to verify that the userid
associated with a transaction is authorized to use started transactions and related EXEC CICS
commands. Such checking is performed every time a transaction tries to use a started transaction or
one of the EXEC CICS commands: COLLECT STATISTICS TRANSACTION, DISCARD TRANSACTION, INQUIRE
TRANSACTION, or SET TRANSACTION. The checking is performed only if you have specified YES for the
SEC system initialization parameter and specified the RESSEC(YES) option on the
resource definitions. For further information on how resource security can provide a further level
of security to transaction security, see Resource security for transactions. Note: You can specify the XPCT parameter in the SIT, PARM, or SYSIN only.
- YES
- CICS calls RACF using the default CICS resource class name CICSPCT prefixed with A or B, to
verify that the userid associated with a transaction is authorized to use started transactions or
related EXEC CICS commands.
The resource class name is ACICSPCT and the grouping class name is BCICSPCT.
- name
- CICS calls RACF, using the specified resource class name, to verify that the userid associated
with a transaction is authorized to use started transactions or related EXEC CICS commands. The
resource class name is ACICSPCT and the grouping class name is BCICSPCT.
The resource class name specified must be 1 through 7 characters.
- NO
- CICS does not perform any started task resource security checks, allowing any user to use started transactions or related EXEC CICS commands.