XRES
The XRES system initialization parameter specifies whether you want CICS to perform resource security checking for particular CICS resources and optionally specifies the general resource class name in which you have defined the resource security profiles.
- XRES={YES|name|NO}
- You can specify the XRES parameter in the SIT, PARM, or SYSIN only. If you
specify YES, or a general resource class name, CICS calls the external security manager to verify
that the user ID associated with a transaction is authorized to use the resource. This checking is
performed every time a transaction tries to access a resource.
The actual profile name passed to the external security manager is the name of the resource to be checked, prefixed by its resource type; for example, for a document template whose resource definition is named “WELCOME", the profile name passed to the external security manager is DOCTEMPLATE.WELCOME. Even if a command references the document template using its 48-character template name, the shorter name (up to 8 characters) of the DOCTEMPLATE resource definition is always used for security checking.
The checking is performed only if you have specified YES for the SEC system initialization parameter and specified the RESSEC(YES) option on the TRANSACTION resource definition. For further information on how resource security can provide a further level of security to transaction security, see Resource security for transactions.
- YES
- CICS calls the external security manager, using the default CICS resource class name of RCICSRES, to check whether the user ID associated with a transaction is authorized to use the resource it is trying to access. The resource class name is RCICSRES and the grouping class name is WCICSRES.
- name
- CICS calls the external security manager, using the specified resource class name prefixed by the letter R, to check whether the user ID associated with a transaction is authorized to use the resource it is trying to access. The resource class name is Rname and the grouping class name is Wname. The resource class name specified must be 1 through 7 characters.
- NO
- CICS does not perform any security checks for resources, allowing access to any user.