This leaves a security hole since they can now SET things other than
terminals.
Has anyone come up with another way to do this? Any help will be
appreciated.
Bobby
> We are trying to start using upper/lower case text in our CICS maps. We
> can
> build the map and everything looks fine until enter is pressed. I have
> all terminals
> defined as UCTRAN(YES) in the typeterm definition.
> If we allow the programmer to use the SP translator option, they can use
> EXEC CICS SET TERMINAL(XXXX) UCTRANST (NOUCTRAN)
>
> This leaves a security hole since they can now SET things other than
> terminals.
>
> Has anyone come up with another way to do this? Any help will be
> appreciated.
>
> Bobby
We set uctran(tranid) in all TYPETERMs, and uctran(yes) in all
PROFILES. then, for all transactions that we want to receive
untranslated datastreams, we give them an equivalent PROFILE with
uctran(no). we do not permit any applications to do SETs.
Bobby.. Check with your RACF folks.. If your shop has implemented
"command" security you can protect the various SP commands
with standard RACF profiles. It will allow you a lot of granularity
and you can prevent "them" from issuing SET commands against other
resources, or PERF commands etc.
Check the CICS/RACF security Guide for details.
----------
> From: Bobby Herring <bobhe...@JUNO.COM>
> To: CIC...@UGA.CC.UGA.EDU
> Subject: Upper/Lower case in CICS screens
> Date: 18 December 1997 18:12
>
> We are trying to start using upper/lower case text in our CICS maps. We
> can
> build the map and everything looks fine until enter is pressed. I have
> all terminals
> defined as UCTRAN(YES) in the typeterm definition.
> If we allow the programmer to use the SP translator option, they can use
> EXEC CICS SET TERMINAL(XXXX) UCTRANST (NOUCTRAN)
>
> This leaves a security hole since they can now SET things other than
> terminals.
>
We define all terminals with UCTRAN(TRANID) and then specify
UCTRAN(YES or NO) on the individual transaction definitions.
We use UCTRAN(YES) as the default for transaction definitions
but specify UCTRAN(NO) when the owner requests a transaction
be able to accept upper/lower case data. This seems to work
well for us.
What release of CICS are you running? We are 4.1.
One word of warning. If your program abends before the indicator is reset,
everything else will be lower case. You could either handle that in your
DFHPEP, or if you have a 'menu' system that everyone has to go through,
reset it there. Good luck,
Ruud van Zundert,
Windmill Programmes Ltd.
-----Original Message-----
From: Bobby Herring <bobhe...@JUNO.COM>
To: CIC...@UGA.CC.UGA.EDU <CIC...@UGA.CC.UGA.EDU>
Date: Thursday, December 18, 1997 06:13
Subject: Upper/Lower case in CICS screens
>We are trying to start using upper/lower case text in our CICS maps. We
>can
>build the map and everything looks fine until enter is pressed. I have
>all terminals
>defined as UCTRAN(YES) in the typeterm definition.
>If we allow the programmer to use the SP translator option, they can use
>EXEC CICS SET TERMINAL(XXXX) UCTRANST (NOUCTRAN)
>
>This leaves a security hole since they can now SET things other than
>terminals.
>
>Has anyone come up with another way to do this? Any help will be
>appreciated.
>
>Bobby
>
I am doing this in many of my programs, but since I am not at work I am
uncertain exactly how I am doing it. If you want to call me next week
(Sunday or Monday) I will be happy to look it up.
David Wakser, Dynatron, Newark, NJ (973) 648-6700 x318
Put the EXEC CICS SET TERMINAL(XXXX) UCTRANST (NOUCTRAN) in a program you
write, and make them CALL or LINK to that program. You can then just compile
your program with the SP option, but theirs without SP.
Christopher Frank
STAR, Inc.
BA...@NERVM.NERDC.UFL.EDU on 19/12/97 08:26:32 AM
Please respond to CIC...@AKH-WIEN.AC.AT
To: CIC...@AKH-WIEN.AC.AT
cc: (bcc: Greg Aldridge/Westpac/NZ)
Subject: Re: Upper/Lower case in CICS screens
On Thu, 18 Dec 1997 13:12:51 EST Bobby Herring said:
>We are trying to start using upper/lower case text in our CICS maps.
...
>Has anyone come up with another way to do this? Any help will be
>appreciated.
We define all terminals with UCTRAN(TRANID) and then specify
UCTRAN(YES or NO) on the individual transaction definitions.
We use UCTRAN(YES) as the default for transaction definitions
but specify UCTRAN(NO) when the owner requests a transaction
be able to accept upper/lower case data. This seems to work
well for us.
What release of CICS are you running? We are 4.1.
The views expressed in this document do not necessarily reflect those of
Westpac Banking Corporation
Westpac Banking Corporation is incorporated in New South Wales, Australia
Chris
Of course not - ASIS only works on the second and/or later receive in the same task, and as
every application must be pseudo-conversational - that is a no-no.
Regards
Volker Bandke
WinErr: 014 Keyboard locked - Try anything you can think of.
Jean-Claude
That's why...
> If we allow the programmer to use the SP translator option, they can use
> EXEC CICS SET TERMINAL(XXXX) UCTRANST (NOUCTRAN)
>
> This leaves a security hole since they can now SET things other than
> terminals.
>
> Has anyone come up with another way to do this? Any help will be
> appreciated.
That you can/must specify the SP translator option implies that your
CICS is "current" enough to avail yourselves of UCTRAN=TRANID in the
TYPETERM and UCTRAN=YES/NO in the transaction PROFILE. With that
extended granularity you can control the case-translation attribute by
transaction as well as by terminal. The CICS (4.1) Resource Definition
Guide has a pretty good explanation of what to expect from various
combinations of the TYPETERM and PROFILE UCTRAN attributes (e.g., see
the table at the bottom of topic 4.7.1 on the CDROM (CICS/ESA V4R1
BookShelf)).
As an aside, you don't necessarily have to define your own profiles: the
IBM-supplied profiles DFHCICSP and DFHCICST specify UCTRAN=YES and
UCTRAN=NO respectively; they are otherwise identical.
As a further aside, the same granularity with regard to case-translation
attributes is described in the CICS/VSE 2.2 RDO manual; it has the
"revision bar" next to it indicating "new" for that release.
John Chase
NOTIS Development & Support
>
> Bobby
Len Rugen
Sr. Systems Programmer
University of Missouri
401 Clark Hall
Columbia MO 65211
(573) 882-9237
OTOH, if the goal here is to ensure UCTRAN is set BACK properly (for the
uppercase-only transactions) then you would in addition have to perform the
uppercase translation manually after resetting the bit. So your point is well
taken.
Chris Frank
STAR, Inc.
Bill Lynch
Bobby Herring wrote:
>
> We are trying to start using upper/lower case text in our CICS maps. We
> can
> build the map and everything looks fine until enter is pressed. I have
> all terminals
> defined as UCTRAN(YES) in the typeterm definition.
> If we allow the programmer to use the SP translator option, they can use
> EXEC CICS SET TERMINAL(XXXX) UCTRANST (NOUCTRAN)
>
> This leaves a security hole since they can now SET things other than
> terminals.
>
> Has anyone come up with another way to do this? Any help will be
> appreciated.
>
> Bobby