That is true but if the application is NOT passing the UTOKEN or using
the macro that requires the commands be defined in OPERCMDS then that
won't work.  I was only suggesting they refer to the documentation to
see if commands are defined in other resource classes.  The CMDAUTH
macro requires that all entities be defined in OPERCMDS.

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Edward Jaffe
Sent: Monday, December 10, 2007 10:11 AM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: MVS Command Authorization

Gregory, Gary G wrote:
> That's assuming the OEM product issues the RACROUTE call to verify the
> user has access to the command.
>   

No. The system issues the CMDAUTH call when processing the command 
unless MGCEFAST is set in the MGCRE parameter list.

The only responsibility of any product issuing MGCRE is to pass the 
correct UTOKEN in the event that the implicit mechanism used by the 
system will choose the "wrong" one.

-- 
Edward E Jaffe
Phoenix Software International, Inc
5200 W Century Blvd, Suite 800
Los Angeles, CA 90045
310-338-0400 x318
[EMAIL PROTECTED]
http://www.phoenixsoftware.com/

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to