Prevent some ISM Help Desk facility users from issuing cancel action for other userids

Yes. I looked at the ISM supplied script to drive the Help Desk facility in he SISZCONF PDSE within member ISZSCRC. It uses the ISM internal function 'extrauth' to compare the t_auth variable of the Help Desk user to see if their AUTH common enduser parameter is greater than or equal to the auth level required to issue the ISM priviledge 'STOP' command. The STOP command as provided requires the highest AUTH level of '9'. When the 'C' cancel action is requested, if the requesting userid is not defined with an enduser AUTH value of '9', they would receive message 'ISZ0232E NOT AUTHORIZED TO USE command STOP'. If the userid that uses the Help Desk facility signs on with less than an AUTH '9', the Help Desk panel will not even offer the 'C' Cancel option.

I confirmed this by modifying one of my ISM userids common enduser AUTH from '9' to '8' and then logged of ISM and logged back on and when I now go into the Help Desk session, the'C' Cancel action is no longer displayed on the ISZCOMDK panel.

The ISZPANC member within the SISZCONF PDSE in the panel ISZCONDK checks the AUTH value of the Help Desk user and if they do not have AUTH 9 required to issue the ISM STOP command, the 'C' cancel action is not displayed on the ISZCOMDK panel in message 9466 which offers the 'C' Cancel text on the panel.

Bill Bulfin
IBM Session Manager Level2 Support