Interface for RACROUTE-Calls from REXX/Cobol/PLI

This item is a valid requirement but unlikely to be given high enough priority to be placed into the product plan. If this requirement is high value, please re-open it, or open a new requirement.

Thank you for the response. We understand and agree with the requirement. Implementation is not committed. One possibility is providing a callable service that could be invoked from a high-level language and/or provide a java front-end.

yes, the program runs APF-authorized from a linklist-library, but do not ask me, if in supervisor-state or with system key, I don't know it. The z/OS system-programmer did the programming.
For checking the access-right for another userid there is used USERID=. We use it for checking the right of a technical user, witch is used for the process.
So we need the interface in different ways:
- evaluate the own access right to a specific profile with a specific access-level without logging (maybe you can check the application-data of the profile, if this profile is allowed to be checked without logging)
- evaluate the own access-right to a specific profile with a specific access-level with normal logging
- evaluate the access-right to a specific profile with a specific access-level for another userid (this should include an additional check for an surrogat-right for the foreign userid)
Hopefully this will answer your questions.

Thank you for the response. As you mention checking access 'without error message', we presume you are referring to the LOG=NONE option on RACROUTE VERIFY. Is your program running APF-authorized, system key 0???7, or in supervisor state? That is required for that option. Similarly, remember a program must be running authorized to check the access of another user (VERIFY ACEE= or USERID= parameters). Is that your intended usage?

We habe 2 different kind of profiles in our own class.
One type of profile are used inside ISPF-Panels with PANEXIT to control the visibility of information on the panels. For this kind of Access-Checking we need only the check-function of RACROUTE VERIFY, without writing error-Messages.
The other profiles control the right to do something in the application. The Application is written in Cobol, parts are written in PLI.
We use an assembler-programm with parameters for class, profile, access-right and type.
We want to add some new functionality, probably written as an web-application in java. Therefore I mentioned Java too.
The main-application is still Cobol, PLI and ISPF. So we still need it for old-fashioned Host-Applications.

Thank you for submitting this requirement. Since you mention java, are you aware of class PlatformAccessControl ? Would this satisfy your requirement?
https://www.ibm.com/support/knowledgecenter/en/SSYKE2_7.0.0/com.ibm.java.zsecurity.api.70.doc/com.ibm.os390.security/com/ibm/os390/security/PlatformAccessControl.html