4.2 Security Checking from Mainframe to Tuxedo

The following figure illustrates the process flow for security verifications from a mainframe to TMA TCP Gateway.

Figure 4-2 Security Checking for Mainframe to Tuxedo Transactions

1. The user ID, established at mainframe log in, is checked by system security to verify that the user has permission to start a client transaction.
2. The user ID is checked by system security to verify that the user has permission to send a request to the gateway.
3. With each request, the gateway passes the user ID to the Tuxedo gateway.

   Note:

   To pass authority checking, the user’s Tuxedo identity must match the mainframe user ID exactly.
4. The TMA TCP Gateway maps the mainframe user ID to a Tuxedo user ID and issues the service request on behalf of that user.
5. The Tuxedo server performs access checks (based on the tpacl file) to verify that the user has access to the requested service.