MVSFORUMS.com Forum Index MVSFORUMS.com
A Community of and for MVS Professionals
 
 FAQFAQ   SearchSearch   Quick Manuals   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

How to block IMS TP transactions from being queued?

 
Post new topic   Reply to topic   printer-friendly view    MVSFORUMS.com Forum Index -> Database
View previous topic :: View next topic  
Author Message
mvsmlk
Beginner


Joined: 08 Oct 2015
Posts: 11
Topics: 4

PostPosted: Tue Mar 01, 2016 4:36 pm    Post subject: How to block IMS TP transactions from being queued? Reply with quote

Hello all,
How do you block or lock selected IMS TP programs from all users so that when they are invoked, they receive a message to the effect that they are not allowed to invoke the screen and the userís screen does NOT lock up?
We do not want to encounter the situation where the /FOR tran command can be successfully issued, and that format screen is returned to the user. We also do not want a transaction to be queued on the message queue.
We have already tried /STO and /LOCK commands, and these do not seem to be the solution for us. When the format is invoked, a message is placed on the message queue and the userís screen hangs until the transaction is /STArted or /UNLOCKed.

Thanks for your ideas.
Back to top
View user's profile Send private message
kolusu
Site Admin
Site Admin


Joined: 26 Nov 2002
Posts: 11813
Topics: 74
Location: San Jose

PostPosted: Tue Mar 01, 2016 5:00 pm    Post subject: Reply with quote

mvsmlk,

How are you determining the users to lockout? Based on RACF or do you maintain a list of block user ids?

You may want to read the excellent article about IMS SECURITY BASICS
_________________
Kolusu - DFSORT Development Team (IBM)
DFSORT is on the Web at:
www.ibm.com/storage/dfsort
Back to top
View user's profile Send private message Send e-mail Visit poster's website
mvsmlk
Beginner


Joined: 08 Oct 2015
Posts: 11
Topics: 4

PostPosted: Wed Mar 02, 2016 7:55 am    Post subject: Reply with quote

Thanks for your response.
I am an IMS DBA, and not familiar with RACF security, although I know we do use it. Our IMS security is outsourced and apparently they are looking for an IMS based solution if there is one. The goal is to block all current IMS users from accessing a transaction without locking up their screen. One way I considered this was to have the transaction assigned to a different class which was not assigned to a message region, but that would queue up transactions and probably lock their screen, as they would be awaiting a response. Another more invasive solution might be to rename the transaction member in LOADLIB, so a S-806 abend might be generated. My thought is that this approach would not lock the user's screen or enqueue a message. I will forward your link on IMS security basics to them. In the meantime, if someone can come up with an IMS command based solution, that would be great.
Back to top
View user's profile Send private message
kolusu
Site Admin
Site Admin


Joined: 26 Nov 2002
Posts: 11813
Topics: 74
Location: San Jose

PostPosted: Wed Mar 02, 2016 10:33 am    Post subject: Reply with quote

mvsmlk wrote:
Thanks for your response.
I am an IMS DBA, and not familiar with RACF security, although I know we do use it.


I would be surprised if IMS transactions did not use the RACF authority.

mvsmlk wrote:

Our IMS security is outsourced and apparently they are looking for an IMS based solution if there is one.


I am confused, if you are the IMS DBA wouldn't you be in charge of setting up the access?

mvsmlk wrote:

The goal is to block all current IMS users from accessing a transaction without locking up their screen. One way I considered this was to have the transaction assigned to a different class which was not assigned to a message region, but that would queue up transactions and probably lock their screen, as they would be awaiting a response. Another more invasive solution might be to rename the transaction member in LOADLIB, so a S-806 abend might be generated. My thought is that this approach would not lock the user's screen or enqueue a message. I will forward your link on IMS security basics to them. In the meantime, if someone can come up with an IMS command based solution, that would be great.


Look up /SECURE command and see if you can use it.
_________________
Kolusu - DFSORT Development Team (IBM)
DFSORT is on the Web at:
www.ibm.com/storage/dfsort
Back to top
View user's profile Send private message Send e-mail Visit poster's website
mvsmlk
Beginner


Joined: 08 Oct 2015
Posts: 11
Topics: 4

PostPosted: Wed Mar 02, 2016 11:26 am    Post subject: Reply with quote

Security is not handled by DBA in our shop. We have a security group which administers that for both IMS and for DB2. In addition, the IMS Security gens (new transaction and DB requests) are performed by a tech support group, and not by DBA. I will check the /SECURE command to see its uses. Thank you very much.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic   printer-friendly view    MVSFORUMS.com Forum Index -> Database All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


MVSFORUMS
Powered by phpBB © 2001, 2005 phpBB Group