PH10007: CECI QUERY SECURITY GIVES NORMAL RESPONSE BUT SHOULD GIVE NOTFND DFHXS1111

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• You just migrated from CICS TS 5.4 to 5.5, using
  the EXEC CICS QUERY SECURITY api command, you notice
  different behavior under CICS TS 5.5.
  .
  For example issuing:
  CECI QUERY SECURITY RESCLASS('xxx') RESID('yyyy.resid')
                      RESIDLENGTH(10)
  .
  Under TS 5.5 returns an EIBRESP  NORMAL
  Under TS 5.4 returns an EIBRESP  NOTFND, which is the
               correct response.
  
  DFHXS1111 date time applid CECI Security violation by user
            userid at netname name for resource yyyy.resid in
            class xxx. SAF codes are (X'00000004',X'00000000').
            ESM codes are (X'00000004',X'00000000').
            RACF request made was AUTH.
  
  
  Additional Symptom(s) Search Keyword(s): KIXREVRJL
  XSRC_RESOURCE_NOT_FOUND EIBRESP2 READ UPDATE
  ALTER CONTROL options  DFHESE findauth
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION: Incorrect NORMAL EIBRESP for QUERY      *
  *                      SECURITY API command.                   *
  ****************************************************************
  A codepath exists in DFHESE where a CICS QUERY SECURITY command
  with a RESCLASS and RESID that do not exist returns an EIBRESP
  of NORMAL when it should have returned NOTFND.
  

Problem conclusion

• DFHESE has been modified to correct the aforementioned scenario.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI64095

Modules/Macros

• DFHESE
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R200 PSY UI64095

     UP19/07/09 P F907

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.