DFS286I SECURITY VIOLATION USERID userid PROGRAM programname

or

SECURITY VIOLATION LINE x PTERM y

or

SECURITY VIOLATION USERID userid

Explanation

The user requested notification at the master terminal when a threshold count of security errors was reached. This threshold was reached on one of the following:
  • LINE x PTERM y
  • NODE nodename (USER username)
  • USERID userid PROGRAM programname

IMS issues USER username with NODE nodename if the terminal is signed on with the /SIGN command. IMS issues USERID userid PROGRAM programname if an application program issues an ICMD call that causes a security error. USERID userid is the user ID of the user that invoked the program that issued the ICMD call. The user ID is based on the type of region in which the program was executing and whether a Get Unique (GU) call was done:

Region Type GU Done Userid
BMP N/A BMP JCL USER
DBT N/A Security token passed in the PAPL
IFP NO Program name
IFP YES User ID (if terminal signed on) or LTERM name where a transaction was issued
MPP NO Program name
MPP YES User ID (if terminal signed on) or LTERM name where a transaction was issued
BMP NO BMP JCL USER
BMP YES User ID (if terminal signed on) or LTERM name where a transaction was issued

For resources defined to IMS using system definition, the security threshold is defined with the SECCNT keyword on the COMM, IMSGEN, or SECURITY macros. For dynamic resources, if the SECCNT parameter is not zero, a threshold value of one is always used. The threshold can also be reached because of unauthorized transactions attempting to issue a DL/I CMD call; in this case, the transaction code involved is identified.

System action

The action is determined by the master terminal operator.

Make sure the user ID is authorized for the resources that you are trying to schedule.

Operator response

(master terminal) Handle as directed by your security procedures.

Module

DFSCMD30, DFSICLZ0, DFSICIO0