Using External Security for CA Datacom › DBUTLTY and External Security

DBUTLTY and External Security

CA Datacom/DB uses all four resource classes for external security. The DTUTIL resource class is the only one with portions of the resource name defined by functions in the CA Datacom product. This section provides a list of valid resource names and a sample resource. (The CA Datacom/DB operator console commands are not secured by external security.)

Note: The DBUTLTY function COMM OPTION=CONSOLE, only requires rights to COMM.CONSOLE. If you are allowed these rights, you can perform any function the CONSOLE API supports. For more information, see the CA Datacom/DB DBUTLTY Reference Guide.

Certain DBUTLTY functions and subfunctions require access at the database and table level. The EXTRACT, MASSADD, and REPORT IXXDUMP functions require the database READ or ADD rights and these functions use the table class specified for the record-at-a-time path. All other functions are validated using the DTUTIL resource class. The format includes the database ID and table name followed by the access rights. AUTO functions also use the table class specified for the record-at-a-time path.

Resource Classes Used by CA Datacom/DB

►►─ cxxname.DB0nnn.table. ─┬─ BACKUP──┬──────────────────────────────────────►◄
                           ├─ DISPLAY─┤
                           ├─ CATALOG─┤
                           ├─ LOAD ───┤
                           └─ OPER────┘

A special case exists for the cxxname.DB0nnnn.table.CATALOG resource. The resource is used in the normal context, but also has a special use when creating a table through SQL. An SQL CREATE requires the CATALOG right to the database to contain the new table. This database right is done using the literal 999 instead of a table name.