Using the Group ID Exit Name

The Group ID Exit Name is a CICS program that builds a list of group IDs for CSPs to use with DB2 access services.

If the catalog access parameters are properly configured, the Group ID Exit Name can be called before any CSPs are generated. The Group ID Exit Name provides the appropriate list of group IDs used to determine table and column authorizations for CSP results.

CSP exit programs are typically used in the absence of facilities like RACF, ACF2, or Top Secret, but where the equivalent of Group-ID Support is desired. However, if you use security packages like RACF, ACF2, or Top Secret, you can write an additional exit program to limit the result set returned from CSPs, for example, one in which user IDs belong to large numbers of groups.

The Group ID Exit Name is a dynamic link. To use it, you must add an entry for a user CSP exit program to the CICS PPT. Also, the program must be in the CICS RPL.