DD Internal Security › CA Datacom Datadictionary Security Model › Relationships

Relationships

In CA Datacom Datadictionary, models are made up of entity-types and defined relationships. The entity-types and relationships in the CA Datacom Datadictionary Security model are:

                       PERSON
                          │
                          │ PER-ATZ-AUTH
                          ▼
                    AUTHORIZATION
                          │
$DD-ATZ-SYS-SEC  ┌────────┴───────┐    $DD-ATZ-ENT-x
                 │                │
                 ▼                ▼
               SYSTEM           TABLE

In defining a profile (AUTHORIZATION entity-occurrence), the entity-occurrence is not meaningful until it is related to the facilities (represented by the SYSTEM entity-occurrences) and the entity-types (represented by TABLE entity-occurrences).

The relationships used are either predefined and are present at installation, or the definitions are generated by the CA Datacom Datadictionary Security Facility as required.

• Profile/Facilities Relationship (SYSTEM) - Are predefined at installation and are defined as $DD-ATZ-SYS-SEC. The relationship indicates that this profile authorizes access to the facility represented by the SYSTEM entity-occurrence.
• Profile/Entity-Type Relationship (TABLE) - Are not predefined at installation other than $DD-ATZ-ENT-SEC which is used to specify access to all statuses of an entity-type.

  To define what entity-types are available for a profile, the status and function must also be defined. Status is defined through the actual relationship name. For example, the relationship $DD-ATZ-ENT-SEC is predefined and authorizes access to all statuses.

  Other relationships are defined by CA Datacom Datadictionary as the profiles are defined. For example, $DD-ATZ-ENT-001 authorizes access to entity-occurrences in T001 status.

  Functions are tied to profile, entity-type, and status. This data becomes part of the profile to entity-type relationship with Intersection Data. It is retained by CA Datacom Datadictionary in the form of 1-byte flags which represent the functions allowed against the entity-types in a defined status.

• Person/Authorization Relationship - Is used not only by CA Datacom Datadictionary, but by other CA products such as CA Ideal, and is defined as PER-ATZ-AUTH. For CA Datacom Datadictionary Security, this relationship defines the profile to which a PERSON entity-occurrence is assigned.