Customizing the TESTAUTH command

Users can invoke the TESTAUTH command to test authorized assembler programs. This includes testing APPC/MVS transaction programs written in assembler language. This chapter describes how you can customize TESTAUTH command processing for your users. For information about how to customize the testing of unauthorized programs, see Customizing the TEST command.

Before people at your installation can use the TESTAUTH command, you must add TESTAUTH to the table of authorized commands. Specifying authorized commands/programs, and commands not supported in the background describes how to maintain and update the table.

You should also limit individual users from using the TESTAUTH command. You can limit users in one of the following ways:

Using TESTAUTH initialization exit routine IKJEGAUI. When a user issues TESTAUTH, IKJEGAUI can check the user-ID and issue a return code to let the user continue, to cancel the TESTAUTH command, or to invoke authority checking with RACF®.
Using RACF. You can use the RACF RDEFINE command to define TESTAUTH as a RACF resource belonging to the TSOAUTH RACF class. Then give selected users access to the TESTAUTH resource using the RACF PERMIT command. Note that users do NOT require a TSO segment in order to gain access to the TESTAUTH profile in the TESTAUTH class.

In addition to controlling access to the TESTAUTH command, you can customize the TESTAUTH command in several ways:

You can write exits to tailor or monitor the processing of the TESTAUTH command or that of its subcommands.
You can supply installation-written subcommands of the TESTAUTH command, and installation-written command processors to be invoked under TESTAUTH. You must define those subcommands and command processors to TESTAUTH, using member IKJTSOxx in SYS1.PARMLIB.

Writing Exits for the TESTAUTH Command

TSO/E provides the following exits for the TESTAUTH command and TESTAUTH subcommands:

IKJEGAUI -- Initialization exit for the TESTAUTH command
IKJEGAUT -- Termination exit for the TESTAUTH command
IKJEGASI -- Initialization exit for TESTAUTH subcommands
IKJEGAST -- Termination exit for TESTAUTH subcommands

Using the TESTAUTH exits, you can:

Restrict certain users from using the TESTAUTH command or TESTAUTH subcommands.
Change the operands a user specifies on the command or subcommands. For example, you can correct a user's errors or restrict users from using certain operands.

For more information about the TESTAUTH command exits, see Writing exits for the TESTAUTH command. For more information about the TESTAUTH subcommand exits, see Writing exits for subcommands of the TESTAUTH command.