Post-initialization processing

If you specify a program list table on the PLTPI system initialization parameter, CICS® checks that the region user ID is authorized as a surrogate user of the user ID specified in the PLTPIUSR system initialization parameter.

The PLTPIUSR system initialization parameter specifies the user ID that CICS is to use for PLT programs that run during CICS initialization. All PLT programs run under the authority of the specified user ID, including the CPLT transaction, which must be authorized to all the resources referenced by the programs.

The scope of PLT security checking is defined by the PLTPISEC system initialization parameter. This parameter specifies whether command security checks and resource security checks are to apply to PLTPI programs.

If you do not specify the PLTPIUSR parameter, CICS runs PLTPI programs under the authority of the CICS region user ID, in which case CICS does not perform a surrogate user check. However, the CICS region user ID must be authorized to all the resources referenced by the PLT programs. Furthermore, the CICS region user ID is associated with any transactions started by PLT programs, and therefore must be authorized to run such transactions.