4.2 Security Checking from Mainframe to Tuxedo
The following figure illustrates the process flow for security verifications from a mainframe to TMA TCP Gateway.

Figure 4-2 Security Checking for Mainframe to Tuxedo Transactions

- The user ID, established at mainframe log in, is checked by system security to verify that the user has permission to start a client transaction.
- The user ID is checked by system security to verify that the user has permission to send a request to the gateway.
- With each request, the gateway passes the user ID to the Tuxedo gateway.
Note:
To pass authority checking, the user’s Tuxedo identity must match the mainframe user ID exactly. - The TMA TCP Gateway maps the mainframe user ID to a Tuxedo user ID and issues the service request on behalf of that user.
- The Tuxedo server performs access checks (based on the
tpacl
file) to verify that the user has access to the requested service.
Parent topic: Setting Up Security for Oracle TMA TCP Gateway