Skip to Main Content
IBM Z Software


This portal is to open public enhancement requests against IBM Z Software products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Delivered
Workspace z/OS Connect
Created by Guest
Created on Mar 12, 2021

z/OS Connect API http headers

Developer wants to set the followings in the http header of response in order to comply with internal security standard.

key="Pragma" value="no-cache"
key="Cache-Control" value="no-store"
key="Strict-Transport-Security" value="max-age=63072000;includeSubDomains;preload"

Idea priority High
  • Admin
    Demelza Farrer
    Reply
    |
    Jan 10, 2023


    This requirement is addressed by z/OS Connect (OpenAPI 3) V.3.0.63 / APAR PH50283:
    https://www.ibm.com/support/pages/apar/PH50283

  • Guest
    Reply
    |
    Sep 16, 2021

    This is a High Priority Security Violation for Humana and we need this enhancement as soon as possible. Can I be informed when this enhancement request is available for testing and especially when this goes to PROD? cgillespie@humana.com

  • Guest
    Reply
    |
    Jun 21, 2021

    Thank you for this RFE.

    This is a strategic requirement that is part of our long term roadmap.

    Delivering this requirement will need some careful design consideration and may take some time to deliver. We are currently seeking participation in our design program to help us develop our initial designs. If you are interested in joining us on this journey to shape the delivery of this capability, please sign up to the Z Client Feedback program via the link below, indicating your interest in z/OS Connect EE:
    https://www-01.ibm.com/marketing/iwm/iwmdocs/web/cc/earlyprograms/zcustomer.shtml

  • Guest
    Reply
    |
    Apr 28, 2021

    We have just closed another RFE, 149888, as a duplicate of this RFE.
    http://www.ibm.com/developerworks/rfe/execute?use_case=viewChangeRequest&CR_ID=149888

    RFE 149888 was specific to CICS but was also in the space of adding standard response headers for APIs. It also requested a standard way to set these headers at runtime (perhaps with a standard mapping).

    This RFE (149233) will be used to capture interest from the community around the capabilities of both adding, and assigning values to, standard response headers across z/OS Connect EE APIs.

  • Guest
    Reply
    |
    Apr 15, 2021

    Thank you for the information. It's been shared with the developers. But, that's not what we want. We want to be able to enforce the standard by using configuration elements in server.xml. For example, httpOptions, httpSession and httpSessionCache.

  • Guest
    Reply
    |
    Mar 30, 2021

    Thank you for this RFE.

    It is possible to add and set response headers in z/OS Connect EE APIs today:
    https://www.ibm.com/support/knowledgecenter/SS4SVW_3.0.0/designing/using_api_editor.html
    See the "Transformation Actions" section of this topic to see how to add headers to a request or response.

    Once the header is added to a response, it is possible to use an "Assign" transformation to set it to a static value for this particular API request, or to use a "Move" transformation to set it dynamically based on a value in the service response.

    Using this functionality you should be able to satisfy the use case described in this RFE.

    If this functionality does not satisfy the use case described in this RFE, it would be useful to understand what capability is required in addition to the functionality available in the product today.

0 MERGED

Passing BAQHTTPHEADERS contents (context containers) in the response message

Merged
Is it possible to use cics container BAQHTTPHEADERS to return response in the Context containers ( HTTP headers) to the client ?We used this instruction on cics : EXEC CICS PUT CONTAINER('BAQHTTPHEADERS') FROM(….)) END-EXEC. By executing some test...
about 3 years ago in z/OS Connect 2 Delivered