While running CICS v4.2 with ACF2r16, some of our IDs that was used for CICS web interface, did not have CICS attribute, but these IDs were able to access CICS [via web interface].
After upgrading to CICS v5.2 with ACF2r16, the same IDs started failing with ACFAE174.
What enhancement / PTF that corrected or enabled this check, posting this question for customer internal documentation / root cause analysis.