Security for EXCI

CICS® applies security checks in a number of ways against requests received from an MVS client program.

Using MRO logon and bind-time security
DFHIRP, the CICS interregion communication program, performs two security checks against users that want to either log on to IRP (specific connections only), or connect to a CICS region (also referred to as bind-time security).
Link security for EXCI
The target CICS server region performs link security checking against requests from the client program.
User security for EXCI
The target CICS server region performs user security checking against the user ID passed on a DPL_ Request call. User security checking is performed only when connections specify ATTACHCSEC(IDENTIFY).
Surrogate user checking for EXCI
EXCI client jobs are subject to surrogate user checking (see Surrogate security). You must authorize the batch region's user ID as a surrogate of the user ID specified on all DPL_Request calls. This configuration means that the batch region's user ID must have READ access to a profile named execution-userid.DFHEXCI in the RACF® SURROGAT general resource class (where execution-userid is the user ID that is specified on the DPL call).

Parent topic: Securing CICS