User Exit LANSA Security Check

A user-defined program can manipulate the processing of the LANSA access check for an object and can return two parameters that will influence further processing. The User Exit Return Code parameter will determine whether to continue with the LANSA access check for an object (DC@P8001) processing or not.

If the user-defined program parameter User Exit Return Code returns a value of:

• C, the LANSA access check for an object routine (DC@P8001) will continue processing and, if required, will override with its own value the Return Code value that was passed by the user exit.

• N, the LANSA access check for an object routine (DC@P8001) will not continue processing, and will return the Return Code that was passed by the user exit program

The valid values for Return Code are N or Y

If the user exit returns a Return Code value that is not Y or N, the LANSA access check for an object (DC@P8001) routine will ignore it and process as for User Exit Return Code value C.

If the Partition ID is required, it can be derived from DC@IDS parameter position 910 - 912.

The LANSA Security Check programs will pass these parameters to the user exit program:

Description Type Length Usage DC@IDS *CHAR 1024 Cannot be changed. Object Name *CHAR 10 Cannot be changed. Object Extension *CHAR 10 Cannot be changed. Object type *CHAR 2 Cannot be changed. Access *CHAR 2 Cannot be changed. Return Code *CHAR 1 Can be changed. Valid values are Y or N User exit return code *CHAR 1 Will be accepted C or N

 

Refer also to Data Area DC@A07 positions 669-688.