The RESCLASS option
Use the QUERY SECURITY command with the RESCLASS option when you want to query access levels for non-CICS® resources.
RESCLASS is the name of a valid RACF® general resource class, such as TERMINAL, FACILITY, or a similar installation-defined resource class. See RACF classes for protecting system resources. The class name identified by RESCLASS is treated literally, with no translation.
Prefixing, as specified in the SECPRFX system initialization parameter, does not apply to QUERY SECURITY RESCLASS. That is, CICS does not prefix the RESID with the CICS-region userid, nor with a user-specified prefix, before calling RACF.
If SEC=NO is specified in the system initialization parameters, QUERY SECURITY RESCLASS always returns READABLE, UPDATABLE, CTRLABLE and ALTERABLE.
QUERY SECURITY RESCLASS('MYCLASS') RESID('MY PROFILE') RESIDLENGTH(10)
the
presence of a blank causes an INVREQ condition. This is because RACF does not allow blanks to be
embedded in a profile name.CICS can RACLIST groups only if the relevant Xname classes are active (for example, XCMD=YES or XCMD=$USRCMD).
You can also use the RESCLASS option for querying access to DB2ENTRY resources defined in a user-defined resource class, which you specify to CICS on the XDB2 system initialization parameter. The rules about activating classes by means of the RACLIST command also apply to DB2ENTRY resource classes named on the XDB2 system initialization parameter. See Resource classes for DB2ENTRYs for more information about user-defined DB2ENTRY resource clases.
SETROPTS RACLIST(TERMINAL)
For non-CICS resource classes, you can issue the SETROPTS RACLIST(classname) command to perform a global RACLIST. See Specifying user-defined resources to RACF for details.