Security checking done in AOR with LU6.1

This section summarizes how security checking is done in the AOR according to how SECURITYNAME is specified in the AOR and TOR, in an LU6.1 environment.

The link userid referred to in Table 1 is the one specified in the SECURITYNAME on the CONNECTION definition, or the USERID on the SESSIONS definition.

If a USERID is specified on the SESSIONS definition, and a link check is done, the userid used is the one on the SESSIONS definition.

Table 1 shows how checking is done when ATTACHSEC(LOCAL) is specified.

Neither the region userid for the TOR, nor the SECURITYNAME in the TOR's CONNECTION definition for the AOR, is relevant to security checking in the AOR.

Table 1. Security checking done in AOR
Region userid for AOR SECURITYNAME in CONNECTION definition USERID in SESSION definition Checking in AOR
USERIDA Not specified Not specified Check against AOR DFLTUSER
USERIDA Not specified USERIDA Check against AOR DFLTUSER
USERIDA Not specified USERIDB Check against USERIDB
USERIDA USERIDA Not specified Check against AOR DFLTUSER
USERIDA USERIDB Not specified Check against USERIDB
USERIDA USERIDA USERIDA Check against AOR DFLTUSER
USERIDA USERIDA USERIDB Check against USERIDB
USERIDA USERIDB USERIDA Check against AOR DFLTUSER
USERIDA USERIDB USERIDB Check against USERIDB
USERIDA USERIDB USERIDC Check against USERIDC