Resource and command check cross-reference

Use this cross-reference to check commands against resources.

Table 1. Resource and command check cross-reference
EXEC CICS COMMAND	RESOURCE CHECK			CHECK CLASS=XCMD
	CLASS	ACCESS	RESOURCE	ACCESS	RESOURCE
ABEND
ACQUIRE				UPDATE	TERMINAL
ACQUIRE FOR BTS See note 9	XFCT	UPDATE	BTS REPOSITORY FILE
ADDRESS
ALLOCATE
ASKTIME
BIF DEEDIT
BIF DIGEST
BUILD ATTACH
CANCEL See note 1	XPCT	READ	TRANSID
CANCEL FOR BTS	XFCT	UPDATE	BTS REPOSITORY FILE
CHANGE PASSWORD
CHANGE TASK
COLLECT STATISTICS				READ	STATISTICS
COLLECT STATISTICS FILE	XFCT	READ	FILE	READ	STATISTICS
COLLECT STATISTICS JOURNALNAME	XJCT	READ	JOURNAL	READ	STATISTICS
COLLECT STATISTICS JOURNALNUM	XJCT	READ	JOURNAL	READ	STATISTICS
COLLECT STATISTICS PROGRAM	XPPT	READ	PROGRAM	READ	STATISTICS
COLLECT STATISTICS TDQUEUE	XDCT	READ	TDQUEUE	READ	STATISTICS
COLLECT STATISTICS TRANSACTION	XPCT	READ	TRANSID	READ	STATISTICS
CONNECT PROCESS
CONVERSE
CREATE ATOMSERVICE	XRES	ALTER	ATOMSERVICE.`resource_name`	ALTER	ATOMSERVICE
CREATE BUNDLE	XRES	ALTER	BUNDLE.`resource_name`	ALTER	BUNDLE
CREATE CONNECTION See note 2				ALTER	CONNECTION
CREATE DB2CONN See note 3		ALTER			DB2CONN
CREATE DB2ENTRY See note 3	XDB2	ALTER	DB2ENTRY	ALTER	DB2ENTRY
CREATE DB2TRAN See note 3	XDB2	ALTER	DB2TRAN	ALTER	DB2TRAN
CREATE DOCTEMPLATE	XRES	ALTER	DOCTEMPLATE.`resource_name`	ALTER	DOCTEMPLATE
CREATE ENQMODEL				ALTER	ENQMODEL
CREATE FILE	XFCT	ALTER	FILE	ALTER	FILE
CREATE IPCONN				ALTER	IPCONN
CREATE JOURNALMODEL				ALTER	JOURNALMODEL
CREATE JVMSERVER	XRES	ALTER	JVMSERVER.`resource_name`	ALTER	JVMSERVER
CREATE LIBRARY				ALTER	LIBRARY
CREATE LSRPOOL				ALTER	LSRPOOL
CREATE MAPSET	XPPT	ALTER	MAPSET	ALTER	MAPSET
CREATE MQCONN				ALTER	MQCONN
CREATE MQMONITOR				ALTER	MQMON
CREATE PARTITIONSET	XPPT	ALTER	PARTITIONSET	ALTER	PARTITIONSET
CREATE PARTNER				ALTER	PARTNER
CREATE PIPELINE				ALTER	PIPELINE
CREATE PROCESSTYPE See note 10				ALTER	PROCESSTYPE
CREATE PROFILE				ALTER	PROFILE
CREATE PROGRAM	XPPT	ALTER	PROGRAM	ALTER	PROGRAM
CREATE SESSIONS See note 3				ALTER	SESSIONS
CREATE TCPIPSERVICE				ALTER	TCPIPSERVICE
CREATE TDQUEUE See note 3	XDCT	ALTER	TDQUEUE	ALTER	TDQUEUE
CREATE TERMINAL See note 3				ALTER	TERMINAL
CREATE TRANCLASS				ALTER	TCLASS
CREATE TRANSACTION	XPCT	ALTER	TRANSID	ALTER	TRANSACTION
CREATE TSMODEL				ALTER	TSMODEL
CREATE TYPETERM				ALTER	TYPETERM
CREATE URIMAP				ALTER	URIMAP
CREATE WEBSERVICE				ALTER	WEBSERVICE
CSD ADD				UPDATE	CSD
CSD ALTER				UPDATE	CSD
CSD APPEND				UPDATE	CSD
CSD COPY				UPDATE	CSD
CSD DEFINE				UPDATE	CSD
CSD DELETE				UPDATE	CSD
CSD DISCONNECT				READ	CSD
CSD ENDBRGROUP				READ	CSD
CSD ENDBRLIST				READ	CSD
CSD ENDBRRSRCE				READ	CSD
CSD GETNEXTGROUP				READ	CSD
CSD GETNEXTLIST				READ	CSD
CSD GETNEXTRSRCE				READ	CSD
CSD INQUIREGROUP				READ	CSD
CSD INQUIRELIST				READ	CSD
CSD INQUIRERSRCE				READ	CSD
CSD INSTALL				ALTER	CSD
CSD LOCK				UPDATE	CSD
CSD REMOVE				UPDATE	CSD
CSD RENAME				UPDATE	CSD
CSD STARTBRGROUP				READ	CSD
CSD STARTBRLIST				READ	CSD
CSD STARTBRRSRCE				READ	CSD
CSD UNLOCK				UPDATE	CSD
CSD USERDEFINE				UPDATE	CSD
DEFINE ACTIVITY See notes 7 and 9	XFCT	UPDATE	BTS REPOSITORY FILE
DEFINE PROCESS See notes 7 and 9	XFCT	UPDATE	BTS REPOSITORY FILE
DELAY
DELETE	XFCT	UPDATE	FILE
DELETE ACTIVITY See note 9	XFCT	UPDATE	BTS REPOSITORY FILE
DELETEQ TD	XDCT	UPDATE	TDQUEUE
DELETEQ TS See note 4	XTST	UPDATE	TSQUEUE
DEQ
DISABLE PROGRAM	XPPT	UPDATE	PROGRAM	UPDATE	EXITPROGRAM
DISCARD ATOMSERVICE	XRES	ALTER	ATOMSERVICE.`resource_name`	ALTER	ATOMSERVICE
DISCARD AUTINSTMODEL				ALTER	AUTINSTMODEL
DISCARD BUNDLE	XRES	ALTER	BUNDLE.`resource_name`	ALTER	BUNDLE
DISCARD CONNECTION
DISCARD DB2CONN				ALTER	DB2CONN
DISCARD DB2ENTRY	XDB2	ALTER	DB2ENTRY	ALTER	DB2ENTRY
DISCARD DB2TRAN	XDB2	ALTER	DB2TRAN	ALTER	DB2TRAN
DISCARD DOCTEMPLATE	XRES	ALTER	DOCTEMPLATE.`resource_name`	ALTER	DOCTEMPLATE
DISCARD ENQMODEL				ALTER	ENQMODEL
DISCARD FILE	XFCT	ALTER	FILE	ALTER	FILE
DISCARD IPCONN				ALTER	IPCONN
DISCARD JOURNALMODEL				ALTER	JOURNALMODEL
DISCARD JOURNALNAME	XJCT	ALTER	JOURNAL	ALTER	JOURNALNAME
DISCARD JVMSERVER	XRES	ALTER	JVMSERVER.`resource_name`	ALTER	JVMSERVER
DISCARD LIBRARY				ALTER	LIBRARY
DISCARD MQCONN				ALTER	MQCONN
DISCARD MQMONITOR				ALTER	MQMON
DISCARD PARTNER				ALTER	PARTNER
DISCARD PIPELINE				ALTER	PIPELINE
DISCARD PROCESSTYPE See note 10				ALTER	PROCESSTYPE
DISCARD PROFILE				ALTER	PROFILE
DISCARD PROGRAM	XPPT	ALTER	PROGRAM	ALTER	PROGRAM
DISCARD TCPIPSERVICE				ALTER	TCPIPSERVICE
DISCARD TDQUEUE	XDCT	ALTER	TDQUEUE	ALTER	TDQUEUE
DISCARD TERMINAL				ALTER	TERMINAL
DISCARD TRANCLASS				ALTER	TCLASS
DISCARD TRANSACTION	XPCT	ALTER	TRANSID	ALTER	TRANSACTION
DISCARD TSMODEL				ALTER	TSMODEL
DISCARD URIMAP				ALTER	URIMAP
DISCARD WEBSERVICE				ALTER	WEBSERVICE
DOCUMENT CREATE See note 14	XRES	READ	DOCTEMPLATE.`resource_name`
DOCUMENT INSERT See note 14	XRES	READ	DOCTEMPLATE.`resource_name` See note 13
DUMP TRANSACTION
ENABLE PROGRAM	XPPT	UPDATE	PROGRAM	UPDATE	EXITPROGRAM
ENDBR See note 5
ENQ
ENTER TRACENUM
EXTRACT
EXTRACT EXIT	XPPT	READ	PROGRAM	UPDATE	EXITPROGRAM
EXTRACT STATISTICS				READ	STATISTICS
FEPI					FEPI
FORMATTIME
FREE
FREEMAIN
GDS
GETMAIN
HANDLE ABEND PROGRAM	XPPT	READ	PROGRAM
HANDLE AID
HANDLE CONDITION
IGNORE CONDITION
INQUIRE ACTIVITYID See note 9	XFCT	READ	BTS REPOSITORY FILE
INQUIRE ASSOCIATION				READ	ASSOCIATION
INQUIRE ATOMSERVICE	XRES	READ	ATOMSERVICE.`resource_name`	READ	ATOMSERVICE
INQUIRE AUTINSTMODEL				READ	AUTINSTMODEL
INQUIRE AUTOINSTALL				READ	AUTOINSTALL
INQUIRE BRFACILITY				READ	BRFACILITY
INQUIRE BUNDLE	XRES	READ	BUNDLE.`resource_name`	READ	BUNDLE
INQUIRE BUNDLEPART	XRES	READ	BUNDLE.`resource_name`	READ	BUNDLEPART
INQUIRE CAPDATAPRED	XRES	READ	EVENTBINDING.`resource_name`	READ	CAPDATAPRED
INQUIRE CAPINFOSRCE	XRES	READ	EVENTBINDING.`resource_name`	READ	CAPINFOSRCE
INQUIRE CAPOPTPRED	XRES	READ	EVENTBINDING.`resource_name`	READ	CAPOPTPRED
INQUIRE CAPTURESPEC	XRES	READ	EVENTBINDING.`resource_name`	READ	CAPTURESPEC
INQUIRE CFDTPOOL				READ	CFDTPOOL
INQUIRE CONNECTION				READ	CONNECTION
INQUIRE CONTAINER See note 9	XFCT	READ	BTS REPOSITORY FILE
INQUIRE DB2CONN				READ	DB2CONN
INQUIRE DB2ENTRY	XDB2	READ	DB2ENTRY	READ	DB2ENTRY
INQUIRE DB2TRAN	XDB2	READ	DB2TRAN	READ	DB2TRAN
INQUIRE DELETSHIPPED				READ	DELETSHIPPED
INQUIRE DOCTEMPLATE	XRES	READ	DOCTEMPLATE.`resource_name`	READ	DOCTEMPLATE
INQUIRE DSNAME				READ	DSNAME
INQUIRE DUMPDS				READ	DUMPDS
INQUIRE ENQMODEL				READ	ENQMODEL
INQUIRE EPADAPTER	XRES	READ	EPADAPTER.`resource_name`	READ	EPADAPTER
INQUIRE EPADAPTERSET	XRES	READ	EPADAPTERSET.`resource_name`	READ	EPADAPTERSET
INQUIRE EPADAPTINSET	XRES	READ	EPADAPTERSET.`resource_name`	READ	EPADAPTINSET
INQUIRE EVENT See note 9	XFCT	READ	BTS REPOSITORY FILE
INQUIRE EVENTBINDING	XRES	READ	EVENTBINDING.`resource_name`	READ	EVENTBINDING
INQUIRE EVENTPROCESS				READ	EVENTPROCESS
INQUIRE EXCI				READ	EXCI
INQUIRE EXITPROGRAM	XPPT	READ	PROGRAM	READ	EXITPROGRAM
INQUIRE FILE	XFCT	READ	FILE	READ	FILE
INQUIRE HOST				READ	HOST
INQUIRE IPCONN				READ	IPCONN
INQUIRE IRC				READ	IRC
INQUIRE JOURNALMODEL				READ	JOURNALMODEL
INQUIRE JOURNALNAME	XJCT	READ	JOURNAL	READ	JOURNAL
INQUIRE JVMSERVER	XRES	READ	JVMSERVER.`resource_name`	READ	JVMSERVER
INQUIRE LIBRARY				READ	LIBRARY
INQUIRE MODENAME				READ	MODENAME
INQUIRE MONITOR				READ	MONITOR
INQUIRE MQCONN				READ	MQCONN
INQUIRE MQINI				READ	MQMON
INQUIRE MQMONITOR				READ	MQMON
INQUIRE MVSTCB				READ	MVSTCB
INQUIRE NETNAME				READ	TERMINAL
INQUIRE OSGIBUNDLE	XRES	READ	BUNDLE.`resource_name`	READ	OSGIBUNDLE
INQUIRE OSGISERVICE	XRES	READ	BUNDLE.`resource_name`	READ	OSGISERVICE
INQUIRE PARTNER				READ	PARTNER
INQUIRE PIPELINE				READ	PIPELINE
INQUIRE PROCESS See note 9	XFCT	READ	BTS REPOSITORY FILE
INQUIRE PROCESSTYPE See note 10	XPTT			READ	PROCESSTYPE
INQUIRE PROFILE				READ	PROFILE
INQUIRE PROGRAM	XPPT	READ	PROGRAM	READ	PROGRAM
INQUIRE REQID See note 8	XPCT	READ	TRANSID	READ	REQID
INQUIRE RRMS				READ	RRMS
INQUIRE STATISTICS				READ	STATISTICS
INQUIRE STORAGE				READ	STORAGE
INQUIRE STREAMNAME				READ	STREAMNAME
INQUIRE SUBPOOL				READ	SUBPOOL
INQUIRE SYSDUMPCODE				READ	SYSDUMPCODE
INQUIRE SYSTEM				READ	SYSTEM
INQUIRE TASK				READ	TASK
INQUIRE TCLASS				READ	TCLASS
INQUIRE TCPIP				READ	TCPIP
INQUIRE TCPIPSERVICE				READ	TCPIPSERVICE
INQUIRE TDQUEUE	XDCT	READ	TDQUEUE	READ	TDQUEUE
INQUIRE TEMPSTORAGE				READ	TEMPSTORAGE
INQUIRE TERMINAL				READ	TERMINAL
INQUIRE TIMER See note 9	XFCT	READ	BTS REPOSITORY FILE
INQUIRE TRACEDEST				READ	TRACEDEST
INQUIRE TRACEFLAG				READ	TRACEFLAG
INQUIRE TRACETYPE				READ	TRACETYPE
INQUIRE TRANCLASS				READ	TCLASS
INQUIRE TRANDUMPCODE				READ	TRANDUMPCODE
INQUIRE TRANSACTION	XPCT	READ	TRANSID	READ	TRANSACTION
INQUIRE TSMODEL				READ	TSMODEL
INQUIRE TSPOOL				READ	TSPOOL
INQUIRE TSQNAME See note 4	XTST	READ	TSQNAME	READ	TSQUEUE
INQUIRE TSQUEUE See note 4	XTST	READ	TSQUEUE	READ	TSQUEUE
INQUIRE UOW				READ	UOW
INQUIRE UOWDSNFAIL				READ	UOWDSNFAIL
INQUIRE UOWENQ				READ	UOWENQ
INQUIRE UOWLINK				READ	UOWLINK
INQUIRE URIMAP				READ	URIMAP
INQUIRE VTAM®				READ	VTAM (now the z/OS® Communications Server)
INQUIRE WEB				READ	WEB
INQUIRE WEBSERVICE				READ	WEBSERVICE
INQUIRE WLMHEALTH				READ	WLMHEALTH
INQUIRE XMLTRANSFORM	XRES	READ	XMLTRANSFORM.`resource_name`	READ	XMLTRANSFORM
ISSUE
LINK	XPPT	READ	PROGRAM
LINK ACQPROCESS See note 9	XFCT	UPDATE	BTS REPOSITORY FILE
LINK ACTIVITY / ACQACTIVITY See note 9	XFCT	UPDATE	BTS REPOSITORY FILE
LOAD	XPPT	READ	PROGRAM
MONITOR
PERFORM DELETSHIPPED				UPDATE	DELETSHIPPED
PERFORM DUMP				UPDATE	DUMP
PERFORM PIPELINE				UPDATE	PIPELINE
PERFORM RESETTIME				UPDATE	RESETTIME
PERFORM SECURITY REBUILD				UPDATE	SECURITY
PERFORM SHUTDOWN				UPDATE	SHUTDOWN
PERFORM SSL REBUILD				UPDATE	SECURITY
PERFORM STATISTICS				UPDATE	STATISTICS
POINT
POP HANDLE
POST
PURGE MESSAGE
PUSH HANDLE
QUERY SECURITY See note 6
READ	XFCT	READ	FILE
READ NEXT See note 5
READ PREV See note 5
READQ TD	XDCT	UPDATE	TDQUEUE
READQ TS See note 4	XTST	READ	TSQUEUE
RECEIVE
RELEASE	XPPT	READ	PROGRAM
RESET ACTIVITY See note 9	XFCT	UPDATE	BTS REPOSITORY FILE
RESET ACQPROCESS See note 9	XFCT	UPDATE	BTS REPOSITORY FILE
RESETBR See note 5
RESYNC ENTRYNAME				UPDATE	EXITPROGRAM
RETRIEVE
RETURN / RETURN ENDACTIVITY See note 9 and 11	XFCT	UPDATE	BTS REPOSITORY FILE
REWRITE	XFCT	UPDATE	FILE
ROUTE
RUN See note 9 and 11	XFCT	UPDATE	BTS REPOSITORY FILE
RUN / ASYNCH SYNC See note 9	XFCT	UPDATE	DFHLRQ FILE
SEND
SET ATOMSERVICE	XRES	UPDATE	ATOMSERVICE.`resource_name`	UPDATE	ATOMSERVICE
SET AUTOINSTALL				UPDATE	AUTOINSTALL
SET BRFACILITY				UPDATE	BRFACILITY
SET BUNDLE	XRES	UPDATE	BUNDLE.`resource_name`	UPDATE	BUNDLE
SET CONNECTION				UPDATE	CONNECTION
SET DB2CONN				UPDATE	DB2CONN
SET DB2ENTRY	XDB2	UPDATE	DB2ENTRY	UPDATE	DB2ENTRY
SET DB2TRAN	XDB2	UPDATE	DB2TRAN	UPDATE	DB2TRAN
SET DELETSHIPPED				UPDATE	DELETSHIPPED
SET DOCTEMPLATE	XRES	UPDATE	DOCTEMPLATE.`resource_name`	UPDATE	DOCTEMPLATE
SET DSNAME				UPDATE	DSNAME
SET DUMPDS				UPDATE	DUMPDS
SET ENQMODEL				UPDATE	ENQMODEL
SET EPADAPTER	XRES	UPDATE	EPADAPTER.`resource_name`	UPDATE	EPADAPTER
SET EPADAPTERSET	XRES	UPDATE	EPADAPTERSET.`resource_name`	UPDATE	EPADAPTERSET
SET EVENTBINDING	XRES	UPDATE	EVENTBINDING.`resource_name`	UPDATE	EVENTBINDING
SET EVENTPROCESS	XRES	UPDATE	EVENTPROCESS.`resource_name`	UPDATE	EVENTPROCESS
SET FILE	XFCT	UPDATE	FILE	UPDATE	FILE
SET HOST				UPDATE	HOST
SET IPCONN				UPDATE	IPCONN
SET IRC				UPDATE	IRC
SET JOURNALNAME	XJCT	UPDATE	JOURNAL	UPDATE	JOURNAL
SET JVMSERVER	XRES	UPDATE	JVMSERVER.`resource_name`	UPDATE	JVMSERVER
SET LIBRARY				UPDATE	LIBRARY
SET MODENAME				UPDATE	MODENAME
SET MONITOR				UPDATE	MONITOR
SET MQCONN See note 13				UPDATE	MQCONN
SET MQMONITOR				UPDATE	MQMON
SET NETNAME				UPDATE	TERMINAL
SET PIPELINE				UPDATE	PIPELINE
SET PROCESSTYPE See note 10	XPTT			UPDATE	PROCESSTYPE
SET PROGRAM	XPPT	UPDATE	PROGRAM	UPDATE	PROGRAM
SET PROGRAM REPLICATION See note 16				ALTER	REPLICATION
SET STATISTICS				UPDATE	STATISTICS
SET SYSDUMPCODE See note 15				UPDATE	SYSDUMPCODE
SET SYSTEM				UPDATE	SYSTEM
SET TASK				UPDATE	TASK
SET TCLASS				UPDATE	TCLASS
SET TCPIP				UPDATE	TCPIP
SET TCPIPSERVICE				UPDATE	TCPIPSERVICE
SET TDQUEUE See note 3	XDCT	UPDATE	TDQUEUE	UPDATE	TDQUEUE
SET TEMPSTORAGE				UPDATE	TEMPSTORAGE
SET TERMINAL				UPDATE	TERMINAL
SET TRACEDEST				UPDATE	TRACEDEST
SET TRACEFLAG				UPDATE	TRACEFLAG
SET TRACETYPE				UPDATE	TRACETYPE
SET TRANCLASS				UPDATE	TCLASS
SET TRANDUMPCODE				UPDATE	TRANDUMPCODE
SET TRANSACTION	XPCT	UPDATE	TRANSID	UPDATE	TRANSACTION
SET TSQNAME See note 4	XTST	UPDATE	TSQUEUE	UPDATE	TSQUEUE
SET TSQUEUE See note 4	XTST	UPDATE	TSQNAME	UPDATE	TSQUEUE
SET UOW				UPDATE	UOW
SET UOWLINK				UPDATE	UOWLINK
SET URIMAP				UPDATE	URIMAP
SET VTAM				UPDATE	VTAM
SET WEB				UPDATE	WEB
SET WEBSERVICE				UPDATE	WEBSERVICE
SET WLMHEALTH				UPDATE	WLMHEALTH
SET XMLTRANSFORM	XRES	UPDATE	XMLTRANSFORM.`resource_name`	UPDATE	XMLTRANSFORM
SIGNOFF
SIGNON
SPOOLCLOSE
SPOOLOPEN
SPOOLREAD
SPOOLWRITE
START See note 7	XPCT	READ	TRANSID
STARTBR	XFCT	READ	FILE
STARTBROWSE ACTIVITY See note 9	XFCT	READ	BTS REPOSITORY FILE
STARTBROWSE CONTAINER (BTS) See note 9	XFCT	READ	BTS REPOSITORY FILE
STARTBROWSE EVENT See note 9	XFCT	READ	BTS REPOSITORY FILE
STARTBROWSE PROCESS See note 9	XFCT	READ	BTS REPOSITORY FILE
SUSPEND See note 9	XFCT	UPDATE	BTS REPOSITORY FILE
SYNCPOINT
TCPIP
UNLOCK
VERIFY PASSWORD
WAIT
WAIT JOURNALNAME	XJCT	READ	JOURNAL
WAIT JOURNALNUM	XJCT	READ	JOURNAL
WAITCICS
WEB
WRITE	XFCT	UPDATE	FILE
WRITE JOURNALNAME	XJCT	UPDATE	JOURNAL
WRITE JOURNALNUM	XJCT	UPDATE	DFHJNN
WRITE OPERATOR
WRITEQ TD	XDCT	UPDATE	TDQUEUE
WRITEQ TS See note 4	XTST	UPDATE	TSQUEUE\|TSQNAME
XCTL	XPPT	READ	PROGRAM

Notes:

The CANCEL command can perform two checks. One check is performed against the transaction specified on the CANCEL command. The other check is performed against the transaction associated with the REQID that you are canceling where applicable.
The CREATE CONNECTION command is subject to command security checking when you define a connection. For example, CREATE CONNECTION(CON1) attribute(...). However, when you use the CREATE CONNECTION COMPLETE or CREATE CONNECTION DISCARD command, no command security checking is performed unless you have been authorized to use COMPLETE and DISCARD commands. The COMPLETE and DISCARD commands can be used only by those authorized to perform CREATE CONNECTION(CON1) and CREATE SESSIONS(SES1) commands. Otherwise, ILLOGIC is returned.
An install surrogate user check can also occur. For more information, see Situations where surrogate user checking applies.
A security check is performed for temporary storage queues when SECURITY(YES) is specified in the relevant TSMODEL resource definition, or, if you use a temporary storage table (TST), when a DFHTST TYPE=SECURITY macro is coded for the temporary storage queue.
No security check is performed, because the STARTBR command must be issued before this command. A security check is issued on the STARTBR command.
The QUERY SECURITY command is not controlled by resource or command checks, but it can cause them to be issued.
A start surrogate user check can also occur.
The resource check for the transid is performed only if the REQID is associated with a transaction.
CICS® BTS API commands.
CICS BTS commands that are subject to command security. All other CICS BTS commands are not subject to command-level security.
Any BTS commands that use timing operands access the BTS LRQ file.
The EXEC CICS DOCUMENT CREATE and INSERT commands reference document templates using the 48-character name of the template as specified in the TEMPLATENAME attribute of the DOCTEMPLATE resource definition. However, security checking for these commands uses the name of the DOCTEMPLATE resource definition that corresponds to the TEMPLATENAME attribute.
When command security is active for your CICS region, to use the EXEC CICS SET MQCONN command to start or stop the connection to IBM MQ, users must have authority to use not only the EXEC CICS SET MQCONN command, but also the EXEC CICS EXTRACT EXIT command. If a user attempts to start or stop the connection without the authority to use the EXEC CICS EXTRACT EXIT command, CICS issues messages DFHXS1111 and DFHMQ0302. When resource security for programs (XPPT) is active for your CICS region, when using SET to set the Connection Status to Connected, the user must have sufficient authority to run the supplied CICS MQ programs.
A minimum of READ access is required for CICS document templates used as static Web pages, document templates used by application programs as part of application-generated responses, and document templates used with all EXEC CICS DOCUMENT INSERT and EXEC CICS DOCUMENT CREATE commands with the TEMPLATE option.
For CHECK CLASS=XCMD, you must have at least CONTROL access to update the JOBLIST or DSPLIST option on SET SYSDUMPCODE.
If command security checking is active, besides UPDATE access already required by SET PROGRAM, to issue SET PROGRAM REPLICATION, you must also have ALTER access to the RACF REPLICATION resource. REPLICATION is treated as a CICS resource in the RACF definitions.