Security checking done in AOR with LU6.1
This section summarizes how security checking is done in the AOR according to how SECURITYNAME is specified in the AOR and TOR, in an LU6.1 environment.
The link userid referred to in Table 1 is the one specified in the SECURITYNAME on the CONNECTION definition, or the USERID on the SESSIONS definition.
If a USERID is specified on the SESSIONS definition, and a link check is done, the userid used is the one on the SESSIONS definition.
Table 1 shows how checking is done when ATTACHSEC(LOCAL) is specified.
Neither the region userid for the TOR, nor the SECURITYNAME in the TOR's CONNECTION definition for the AOR, is relevant to security checking in the AOR.
Region userid for AOR | SECURITYNAME in CONNECTION definition | USERID in SESSION definition | Checking in AOR |
---|---|---|---|
USERIDA | Not specified | Not specified | Check against AOR DFLTUSER |
USERIDA | Not specified | USERIDA | Check against AOR DFLTUSER |
USERIDA | Not specified | USERIDB | Check against USERIDB |
USERIDA | USERIDA | Not specified | Check against AOR DFLTUSER |
USERIDA | USERIDB | Not specified | Check against USERIDB |
USERIDA | USERIDA | USERIDA | Check against AOR DFLTUSER |
USERIDA | USERIDA | USERIDB | Check against USERIDB |
USERIDA | USERIDB | USERIDA | Check against AOR DFLTUSER |
USERIDA | USERIDB | USERIDB | Check against USERIDB |
USERIDA | USERIDB | USERIDC | Check against USERIDC |