IBM SC34-6814-04 CICS security control points

UXPLUNAM
Address of an area containing the VTAM LU name.The address may be
zero if no terminal is associated with the request, or the area may be blank
if the terminal is not a VTAM terminal.
UXPTCTUA
Address of the TCT user area.
UXPTCTUL
Address of a fullword containing the length of the TCTUA.
UXPCOMM
Address of a 2-word communication area.
CICS security control points
The following list summarizes the RACROUTE macros used by CICS to invoke the
ESM, and the control points at which they are issued.
RACROUTE
The “front end” to the macros described below, it invokes the MVS router.If
RACF is not present on the system, RACROUTE can route to an alternative
ESM, via the MVS router exit.
RACROUTE REQUEST=VERIFY
Issued at operator signon (with the parameter ENVIR=CREATE), and at sign-off
(with the parameter ENVIR=DELETE). This macro creates or destroys an
access control environment element (ACEE). It is issued at the following CICS
control points:
vNormal signon through EXEC CICS SIGNON
vSignon of the default userid DFLTUSER
vSignon of preset security terminals
vSignon of MRO sessions
vSignon of LUTYPE6.1 sessions
vSignon of APPC sessions
vSignon for XRF tracking of the above
vSignon of the userid on attach requests (for all values of ATTACHSECexcept
LOCAL)
vNormal sign-off through EXEC CICS SIGNOFF
vSign-off when deleting a terminal
vSign-off when TIMEOUT expires
vSign-off of MRO sessions
vSign-off of LUTYPE6.1 sessions
vSign-off of APPC sessions
vSign-off for XRF tracking of the above
vSign-off of the userid on attach requests (for all values of ATTACHSEC
except LOCAL).
RACROUTE REQUEST=VERIFYX
This creates or deletes an ACEE in a single call. It is issued at the following
CICS control points:
vSignon, as an alternative to VERIFY,when an optimized signon is performed
for subsequent signons across an LU6.2 link with ATTACHSEC(VERIFY).
796 Customization Guide