Arsuperm DLL

The arsuperm DLL is called when a user attempts to access a folder, application group, or document, or perform an SQL query, and the security exit is enabled through a flag setting in the ars.ini file. The arsuperm DLL must be stored in the /usr/lpp/ars/V10R5M0/bin/exits directory and must have the APF extended attribute turned on. This DLL must have an exported entry point of PERMEXIT.

The arsuperm DLL is called if one of the following statements exists in the ARS.INI file:
  • SRVR_FLAGS_FOLDER_APPLGRP_EXIT=1 (for folder and application group permission checking)
  • SRVR_FLAGS_DOCUMENT_EXIT=1 (for document permission checking)
  • SRVR_FLAGS_SQL_QUERY_EXIT=1 (for SQL query processing)
Note: Enabling document permission checking or query processing might decrease Content Manager OnDemand performance when performing a document query.

The arsuperm DLL runs in a threaded environment. The exit must be thread-safe.

When compiling the C ARSUPERM sample, the following compiler options must be specified:
  • DEFINE(OS390)
  • ROSTRING
  • DLL
  • LONGNAME
  • RENT
  • XPLINK
When compiling the ARSUPERC (COBOL) sample, the following compiler options must be specified:
  • DLL
  • LIB
  • OBJ
  • RENT
  • TRUNC(OPT)
  • THREAD
  • PGMN(LM)