IBM Security Z Security

 View Only
  • 1.  zSecure CICS toolkit vs application program

    Posted Thu November 03, 2022 09:12 AM
    Hi Guys, 

    Is it possible to use zSecure CICS toolkit to interface with an application program to access and issue RACF commands ? 
    By the way, that application is in Cobol language and access  DB2 running  under z/OS CICS.
    The main  idea is to issue RACF commands under CICS via that application.

    Thank you 

    Jose Villela

    ------------------------------
    Jose Villela Ribeiro Junior IBM zSecurity Consultant
    ------------------------------


  • 2.  RE: zSecure CICS toolkit vs application program

    Posted Thu November 03, 2022 11:33 AM

    Yes,

    All the RACF commands that are available under the RTMM transaction are also available through the API. There are Cobol copybooks for the API commare mapping.



    ------------------------------
    Guus Bonnes
    ------------------------------



  • 3.  RE: zSecure CICS toolkit vs application program

    IBM Champion
    Posted Mon November 07, 2022 02:41 AM
    zSecure CICS Toolkit provides an API for COBOL(and other) programs running in CICS, to access RACF profile information and to modify (many but not all) profile fields.  The API uses a control block to retrieve the (old) profile field values, and to specify the (new) field values, so the (COBOL) program does not have to build a RACF command, and to save on command parsing + syntax verification.
    As long as your COBOL application does not intend to execute RACF commands, but instead updates RACF profile fields via the CICS Toolkit API, you're good.

    ------------------------------
    Rob van Hoboken
    ------------------------------