Attempting to use ESI for package actions and it does not seem to be working.

Document ID : KB000044231
Last Modified Date : 14/02/2018
Show Technical Document Details

 

Problem:

Attempting to switch package security to be driven by the Endevor External security package; I have set the PKGSEC parm to Migrate but it does not seem to be working and the ESI is not showing me anything.

Resolution:

The PKGSEC parm has three options:

Approver:  - this will restrict package actions post cast to those defined with the attached approver group.

ESI – this will restrict package actions post cast to those defined by the in-house security package (ACF2, Top SECRET or RACF0)

Migrate: This is used when a site is in transition between using Approver and ESI security.

With Migrate both are checked, but the most important fact to remember is that APPROVER rules over ESI.   If a user is granted access via APPROVER, ESI is not called.  ESI will only be called if the user attempting the action is not a member of any attached approver group to the package.