Resource and command check cross reference

This topic provides a complete command and resource check cross reference.

Table 1. Resource and command check cross reference
EXEC CICS® COMMAND Resource Check Check class=XCMD
  Class Access Resource Access Resource
ABEND          
ACQUIRE       UPDATE TERMINAL
ACQUIRE for BTS (see note 9) XFCT UPDATE BTS repository file    
ADDRESS          
ALLOCATE          
ASKTIME          
BIF DEEDIT          
BUILD ATTACH          
CANCEL (see note 1) XPCT READ transid    
CANCEL for BTS XFCT UPDATE BTS repository file    
CHANGE PASSWORD          
CHANGE TASK          
COLLECT STATISTICS       READ STATISTICS
COLLECT STATISTICS FILE XFCT READ file READ STATISTICS
COLLECT STATISTICS JOURNALNAME XJCT READ journal READ STATISTICS
COLLECT STATISTICS JOURNALNUM XJCT READ journal READ STATISTICS
COLLECT STATISTICS PROGRAM XPPT READ program READ STATISTICS
COLLECT STATISTICS TDQUEUE XPCT READ tdqueue READ STATISTICS
COLLECT TRANSACTION XDCT READ transid READ STATISTICS
CONNECT PROCESS          
CONVERSE          
CREATE CONNECTION (see note 2)       ALTER CONNECTION
CREATE CORBASERVER       ALTER CORBASERVER
CREATE DB2CONN (see note 3)   ALTER     DB2CONN
CREATE DB2ENTRY (see note 3) XDB2 ALTER db2entry ALTER DB2ENTRY
CREATE DB2TRAN (see note 3) XDB2 ALTER db2tran ALTER DB2TRAN
CREATE DJAR       ALTER DJAR
CREATE DOCTEMPLATE       ALTER DOCTEMPLATE
CREATE ENQMODEL       ALTER ENQMODEL
CREATE FILE XFCT ALTER file ALTER FILE
CREATE JOURNALMODEL       ALTER JOURNALMODEL
CREATE LSRPOOL       ALTER LSRPOOL
CREATE MAPSET XPPT ALTER mapset ALTER MAPSET
CREATE PARTITIONSET XPPT ALTER partitionset ALTER PARTITIONSET
Start of changeCREATE PIPELINEEnd of change       Start of changeALTEREnd of change Start of changePIPELINEEnd of change
CREATE PARTNER       ALTER PARTNER
CREATE PROCESSTYPE (see note 10)       ALTER PROCESSTYPE
CREATE PROFILE       ALTER PROFILE
CREATE PROGRAM XPPT ALTER program ALTER PROGRAM
CREATE REQUESTMODEL       ALTER REQUESTMODEL
CREATE SESSIONS (see note 3)       ALTER SESSIONS
CREATE TCPIPSERVICE       ALTER TCPIPSERVICE
CREATE TDQUEUE (see note 3) XDCT ALTER tdqueue ALTER TDQUEUE
CREATE TERMINAL (see note 3)       ALTER TERMINAL
CREATE TRANCLASS       ALTER TCLASS
CREATE TRANSACTION XPCT ALTER transid ALTER TRANSACTION
CREATE TSMODEL       ALTER TSMODEL
CREATE TYPETERM       ALTER TYPETERM
Start of changeCREATE URIMAPEnd of change       Start of changeALTEREnd of change Start of changeURIMAPEnd of change
Start of changeCREATE WEBSERVICEEnd of change       Start of changeALTEREnd of change Start of changeWEBSERVICEEnd of change
DEFINE ACTIVITY (see notes 7 and 9 XFCT UPDATE BTS repository file    
DEFINE PROCESS (see notes 7 and 9) XFCT UPDATE BTS repository file    
DELAY          
DELETE XFCT UPDATE file    
DELETE ACTIVITY (see note 9) XFCT UPDATE BTS repository file    
DELETEQ TD XDCT UPDATE tdqueue    
DELETEQ TS (see note 4) XTST UPDATE tsqueue    
DEQ          
DISABLE PROGRAM XPPT UPDATE program UPDATE EXITPROGRAM
DISCARD AUTINSTMODEL       ALTER AUTINSTMODEL
DISCARD CONNECTION          
DISCARD CORBASERVER       ALTER CORBASERVER
DISCARD DB2CONN       ALTER DB2CONN
DISCARD DB2ENTRY XDB2 ALTER db2entry ALTER DB2ENTRY
DISCARD DB2TRAN XDB2 ALTER db2tran ALTER DB2TRAN
DISCARD DJAR       ALTER DJAR
DISCARD DOCTEMPLATE       ALTER DOCTEMPLATE
DISCARD ENQMODEL       ALTER ENQMODEL
DISCARD FILE XFCT ALTER file ALTER FILE
DISCARD JOURNALMODEL       ALTER JOURNALMODEL
DISCARD JOURNALNAME XJCT ALTER journal ALTER JOURNALNAME
DISCARD PARTNER       ALTER PARTNER
Start of changeDISCARD PIPELINEEnd of change       Start of changeALTEREnd of change Start of changePIPELINEEnd of change
DISCARD PROCESSTYPE (see note 10)       ALTER PROCESSTYPE
DISCARD PROFILE       ALTER PROFILE
DISCARD PROGRAM XPPT ALTER program ALTER PROGRAM
DISCARD REQUESTMODEL       ALTER REQUESTMODEL
DISCARD TCPIPSERVICE       ALTER TCPIPSERVICE
DISCARD TDQUEUE XDCT ALTER tdqueue ALTER TDQUEUE
DISCARD TERMINAL       ALTER TERMINAL
DISCARD TRANCLASS       ALTER TCLASS
DISCARD TRANSACTION XPCT ALTER transid ALTER TRANSACTION
DISCARD TSMODEL       ALTER TSMODEL
Start of changeDISCARD URIMAPEnd of change       Start of changeALTEREnd of change Start of changeURIMAPEnd of change
Start of changeDISCARD WEBSERVICEEnd of change       Start of changeALTEREnd of change Start of changeWEBSERVICEEnd of change
DOCUMENT         DOCUMENT
DUMP TRANSACTION          
ENABLE PROGRAM XPPT UPDATE program UPDATE EXITPROGRAM
ENDBR (see note 5)          
ENQ          
ENTER TRACENUM          
EXTRACT          
EXTRACT EXIT XPPT READ program UPDATE EXITPROGRAM
Start of changeEXTRACT STATISTICSEnd of change       Start of changeREADEnd of change Start of changeSTATISTICSEnd of change
FEPI         FEPI
FORMATTIME          
FREE          
FREEMAIN          
GDS          
GETMAIN          
HANDLE ABEND PROGRAM XPPT READ program    
HANDLE AID          
HANDLE CONDITION          
IGNORE CONDITION          
INQUIRE ACTIVITYID (see note 9) XFCT READ BTS repository file    
INQUIRE AUTINSTMODEL       READ AUTINSTMODEL
INQUIRE AUTOINSTALL       READ AUTOINSTALL
INQUIRE BEAN       READ BEAN
INQUIRE BRFACILITY       READ BRFACILITY
INQUIRE CFDTPOOL       READ CFDTPOOL
INQUIRE CLASSCACHE       READ CLASSCACHE
INQUIRE CONNECTION       READ CONNECTION
INQUIRE CORBASERVER       READ CORBASERVER
INQUIRE CONTAINER (see note 9) XFCT READ BTS repository file    
INQUIRE DB2CONN       READ DB2CONN
INQUIRE DB2ENTRY XDB2 READ db2entry READ DB2ENTRY
INQUIRE DB2TRAN XDB2 READ db2tran READ DB2TRAN
INQUIRE DELETSHIPPED       READ DELETSHIPPED
INQUIRE DJAR       READ DJAR
INQUIRE DOCTEMPLATE       READ DOCTEMPLATE
INQUIRE DSNAME       READ DSNAME
INQUIRE DUMPDS       READ DUMPDS
INQUIRE ENQMODEL       READ ENQMODEL
Start of changeINQUIRE EXCIEnd of change       Start of changeREADEnd of change Start of changeEXCIEnd of change
INQUIRE EVENT (see note 9) XFCT READ BTS repository file    
INQUIRE EXITPROGRAM XPPT READ program READ EXITPROGRAM
INQUIRE FILE XFCT READ file READ FILE
Start of changeINQUIRE HOSTEnd of change       Start of changeREADEnd of change Start of changeHOSTEnd of change
INQUIRE IRC       READ IRC
INQUIRE JOURNALMODEL       READ JOURNALMODEL
INQUIRE JOURNALNAME XJCT READ journal READ JOURNAL
INQUIRE JVM       READ JVM
INQUIRE JVMPOOL       READ JVMPOOL
INQUIRE JVMPROFILE       READ JVMPROFILE
INQUIRE MODENAME       READ MODENAME
INQUIRE MONITOR       READ MONITOR
Start of changeINQUIRE MVSTCBEnd of change       Start of changeREADEnd of change Start of changeMVSTCBEnd of change
INQUIRE NETNAME       READ TERMINAL
INQUIRE PARTNER       READ PARTNER
Start of changeINQUIRE PIPELINEEnd of change       Start of changeREAD End of change Start of changePIPELINEEnd of change
INQUIRE PROCESS (see note 9) XFCT READ BTS repository file    
INQUIRE PROCESSTYPE (see note 10)XPTT       READ PROCESSTYPE
INQUIRE PROFILE       READ PROFILE
INQUIRE PROGRAM XPPT READ program READ PROGRAM
INQUIRE REQID (see note 8) XPCT READ transid READ REQID
INQUIRE REQUESTMODEL       READ REQUESTMODEL
INQUIRE RRMS       READ RRMS
INQUIRE STATISTICS       READ STATISTICS
INQUIRE STORAGE       READ STORAGE
INQUIRE STREAMNAME       READ STREAMNAME
INQUIRE SUBPOOL       READ SUBPOOL
INQUIRE SYSDUMPCODE       READ SYSDUMPCODE
INQUIRE SYSTEM       READ SYSTEM
INQUIRE TASK       READ TASK
INQUIRE TCLASS       READ TCLASS
INQUIRE TCPIP       READ TCPIP
INQUIRE TCPIPSERVICE       READ TCPIPSERVICE
INQUIRE TDQUEUE XDCT READ tdqueue READ TDQUEUE
INQUIRE TERMINAL       READ TERMINAL
INQUIRE TIMER (see note 9) XFCT READ BTS repository file    
INQUIRE TRACEDEST       READ TRACEDEST
INQUIRE TRACEFLAG       READ TRACEFLAG
INQUIRE TRACETYPE       READ TRACETYPE
INQUIRE TRANCLASS       READ TCLASS
INQUIRE TRANDUMPCODE       READ TRANDUMPCODE
INQUIRE TRANSACTION XPCT READ program READ TRANSACTION
INQUIRE TSMODEL       READ TSMODEL
INQUIRE TSPOOL       READ TSPOOL
INQUIRE TSQUEUE (see note 4) XTST READ tsqueue READ TSQUEUE
INQUIRE TSQNAME (see note 4) XTST READ tsqname READ TSQUEUE
INQUIRE UOW       READ UOW
INQUIRE UOWDSNFAIL       READ UOWDSNFAIL
INQUIRE UOWENQ       READ UOWENQ
INQUIRE UOWLINK       READ UOWLINK
Start of changeINQUIRE URIMAPEnd of change       Start of changeREADEnd of change Start of changeURIMAPEnd of change
INQUIRE VTAM®       READ VTAM
INQUIRE WEB       READ WEB
Start of changeINQUIRE WEBSERVICEEnd of change       Start of changeREADEnd of change Start of changeWEBSERVICEEnd of change
INQUIRE WORKREQUEST       READ WORKREQUEST
ISSUE          
LINK XPPT READ program    
LINK ACQPROCESS (see note 9) XFCT UPDATE BTS repository file    
LINK ACTIVITY / ACQACTIVITY (see note 9) XFCT UPDATE BTS repository file    
LOAD XPPT READ program    
MONITOR          
PERFORM CLASSCACHE       UPDATE CLASSCACHE
PERFORM CORBASERVER (see note 12)       UPDATE CORBASERVER
PERFORM DELETSHIPPED       UPDATE DELETSHIPPED
PERFORM DJAR       UPDATE DJAR
PERFORM DUMP       UPDATE DUMP
PERFORM PIPELINE       UPDATE PIPELINE
PERFORM RESETTIME       UPDATE RESETTIME
PERFORM SECURITY       UPDATE SECURITY
PERFORM SHUTDOWN       UPDATE SHUTDOWN
PERFORM STATISTICS       UPDATE STATISTICS
POINT          
POP HANDLE          
POST          
PURGE MESSAGE          
PUSH HANDLE          
QUERY SECURITY (see note 6)          
READ XFCT READ file    
READ PREV (see note 5)          
READ NEXT (see note 5)          
READQ TD XDCT UPDATE tdqueue    
READQ TS (see note 4) XTST READ tsqueue    
RECEIVE          
RELEASE XPPT READ program    
RESET ACTIVITY (see note 9) XFCT UPDATE BTS repository file    
RESET ACQPROCESS (see note 9) XFCT UPDATE BTS repository file    
RESETBR (see note 5)          
RESYNC ENTRYNAME       UPDATE EXITPROGRAM
RETRIEVE          
RETURN / RETURN ENDACTIVITY (see note 9) (see note 11 XFCT UPDATE BTS repository file    
REWRITE XFCT UPDATE file    
ROUTE          
RUN (see note 9) (see note 11) XFCT UPDATE BTS repository file    
RUN / ASYNCH SYNC (see note 9) XFCT UPDATE DFHLRQ file    
SEND          
SET AUTOINSTALL       UPDATE AUTOINSTALL
SET BRFACILITY       UPDATE BRFACILITY
SET CLASSCACHE       UPDATE CLASSCACHE
SET CONNECTION       UPDATE CONNECTION
SET CORBASERVER       UPDATE CORBASERVER
SET DB2CONN       UPDATE DB2CONN
SET DB2ENTRY XDB2 UPDATE db2entry UPDATE DB2ENTRY
SET DB2TRAN XDB2 UPDATE db2tran UPDATE DB2TRAN
SET DELETSHIPPED       UPDATE DELETSHIPPED
SET ENQMODEL       UPDATE ENQMODEL
SET DSNAME       UPDATE DSNAME
SET DUMPDS       UPDATE DUMPDS
SET ENQMODEL       UPDATE ENQMODEL
SET FILE XFCT UPDATE file UPDATE FILE
Start of changeSET HOSTEnd of change       Start of changeUPDATEEnd of change Start of changeHOSTEnd of change
SET IRC       UPDATE IRC
SET JOURNALNAME XJCT UPDATE journal UPDATE JOURNAL
SET JVMPOOL       UPDATE JVMPOOL
SET MODENAME       UPDATE MODENAME
SET MONITOR       UPDATE MONITOR
SET NETNAME       UPDATE TERMINAL
Start of changeSET PIPELINEEnd of change       Start of changeUPDATEEnd of change Start of changePIPELINEEnd of change
SET PROCESSTYPE (see note 10) XPTT     UPDATE PROCESSTYPE
SET PROGRAM XPPT UPDATE program UPDATE PROGRAM
SET REQUESTMODEL       UPDATE REQUESTMODEL
SET STATISTICS       UPDATE STATISTICS
SET SYSDUMPCODE       UPDATE SYSDUMPCODE
SET SYSTEM       UPDATE SYSTEM
SET TASK       UPDATE TASK
SET TCLASS       UPDATE TCLASS
SET TCPIP       UPDATE TCPIP
SET TCPIPSERVICE       UPDATE TCPIPSERVICE
SET TDQUEUE (see note 3) XDCT UPDATE tdqueue UPDATE TDQUEUE
SET TERMINAL       UPDATE TERMINAL
SET TRACEDEST       UPDATE TRACEDEST
SET TRACEFLAG       UPDATE TRACEFLAG
SET TRACETYPE       UPDATE TRACETYPE
SET TRANCLASS       UPDATE TCLASS
SET TRANDUMPCODE       UPDATE TRANDUMPCODE
SET TRANSACTION XPCT UPDATE transid UPDATE TRANSACTION
SET TSMODEL       UPDATE TSMODEL
SET TSQNAME XTST UPDATE tsqueue UPDATE TSQUEUE
SET TSQUEUE XTST UPDATE tsqname UPDATE TSQUEUE
SET UOW       UPDATE UOW
SET UOWLINK       UPDATE UOWLINK
Start of changeSET URIMAPEnd of change       Start of changeUPDATEEnd of change Start of changeURIMAPEnd of change
SET VTAM       UPDATE VTAM
SET WEB       UPDATE WEB
Start of changeSET WEBSERVICEEnd of change       Start of changeUPDATEEnd of change Start of changeWEBSERVICEEnd of change
SET WORKREQUEST       UPDATE WORKREQUEST
SIGNOFF          
SIGNON          
SPOOLCLOSE          
SPOOLOPEN          
SPOOLREAD          
SPOOLWRITE          
START (see note 7) XPCT READ transid    
STARTBR XFCT READ file    
STARTBROWSE ACTIVITY (see note 9) XFCT READ BTS repository file    
Start of changeSTARTBROWSE CONTAINER (BTS) (see note 9)End of change XFCT READ BTS repository file    
STARTBROWSE EVENT (see note 9) XFCT READ BTS repository file    
STARTBROWSE PROCESS (see note 9 XFCT READ BTS repository file    
SUSPEND (see note 9) XFCT UPDATE BTS repository file    
SYNCPOINT          
TCPIP          
UNLOCK          
VERIFY PASSWORD          
WAIT          
WAIT JOURNALNAME XJCT READ journal    
WAIT JOURNALNUM XJCT READ journal    
WAITCICS          
WEB          
WRITE XFCT UPDATE file    
WRITE JOURNALNAME XJCT UPDATE journal    
WRITE JOURNALNUM XJCT UPDATE DFHJnn    
WRITE OPERATOR          
WRITEQ TD XDCT UPDATE tdqueue    
WRITEQ TS (see note 4) XTST UPDATE tsqueue|tsqname    
XCTL XPPT READ program    
Note:
  1. CANCEL does two checks. One is done against the transaction specified on the CANCEL command, and the other is done against the transaction associated with the reqid you are canceling (where applicable).
  2. The CREATE CONNECTION command is subject to command security checking when you define a connection, for example; CREATE CONNECTION(con1) Attribute(...). However, when you use the CREATE CONNECTION COMPLETE or CREATE CONNECTION DISCARD command, no command security checking is performed unless you have been authorized to use COMPLETE and DISCARD. COMPLETE and DISCARD can only be used by those authorized to perform CREATE CONNECTION(con1) and CREATE SESSIONS(ses1) commands. Otherwise, ILLOGIC is returned.
  3. An install surrogate user check can also occur.
  4. A security check is performed when a DFHTST TYPE=SECURITY macro has been coded in the TST with a name that matches the TSname, or, if RDO is in use for TST and TSMODELS, and security is active for the model matching that queue.
  5. No security check is performed, because the STARTBR command must be issued before this command and a security check is issued on the STARTBR command.
  6. The QUERY SECURITY command is not controlled by resource or command checks, but it can cause them to be issued.
  7. A start surrogate user check can also occur.
  8. The resource check for the transid is only done if the reqid is associated with a transaction.
  9. CICS business transaction services (BTS) application programming commands.
  10. CICS business transaction services commands that are subject to command security. All other CICS business transaction services commands are not subject to command-level security.
  11. Any BTS commands that use timing operands will access the BTS LRQ file
  12. In addition to UPDATE access to the CORBASERVER resource, ALTER access to the associated DJAR resource is required for the PERFORM CORBASERVER SCAN command.