DD Internal Security › Securing CA Datacom Datadictionary Resources

Securing CA Datacom Datadictionary Resources

The purpose of CA Datacom Datadictionary Security is to restrict access to CA Datacom Datadictionary resources to prevent unauthorized use. You can secure CA Datacom Datadictionary resources in several ways including levels of authority assigned to users and restrictions assigned to entity-occurrences.

Note: For more information about restricting access to entity-occurrences with passwords and lock levels, see the CA Datacom Datadictionary User Guide.

CA Datacom Datadictionary resources include:

• Batch and online facilities
• Entity-types
• Entity-types in a specific status
• Functions that can be performed on a specific entity-type in a specific status

CA Datacom Datadictionary Security is based on the following basic premises:

• Not every shop wants or needs the same level of security.

  The CA Datacom Datadictionary Security Facility allows you to determine the level of security required for your environment. The level of security is accomplished through a security level parameter in the System Resource Table (SRT).

  Note: For more information, see CA Datacom Datadictionary Security Model and the CA Datacom/DB Database and System Administration Guide.

  The following are examples of security level decisions:

  Small Shop

  Few people need access to CA Datacom Datadictionary and perform all functions. The only security necessary is PERSON entity-type level.

  Medium Shop

  Few people actually update CA Datacom Datadictionary, but many need access to the data. Restrict access to facilities which perform the updates.

  Large Shop

  Several projects are ongoing in different stages with different project teams. Restrict types of access to certain entity-types in given statuses.

• In most shops, groups of people require the same resource access. Therefore, rather than individually defining access, the concept of profiles was designed. Profiles are a definition of access levels used by groups of people. Profiles are defined and are connected or associated to PERSON entity-occurrence definitions.

If you have more than one CA Datacom Datadictionary, you can have different authorization levels in the different CA Datacom Datadictionary databases.