DQ Internal Security › Securing Access to Tables, Rows, Columns, and Queries

Securing Access to Tables, Rows, Columns, and Queries

CA Dataquery provides several methods to secure access to data. You can limit access to:

• Tables
• Rows and columns
• Queries

Limiting Access to Tables in DQL Mode

The Security Administrator should work with you to list all the CA Datacom/DB tables, rows, and columns that the users will query and to determine which users need access to which tables. The Administrator assigned to the security control function implements the assignment of users to a table or tables to a user. This assignment is stored in the CA Datacom Datadictionary DBID named in the System Option Table DQOPTLST DDDBID= parameter.

Additionally, CA Datacom/DB Security can be used to secure tables. For SQL Mode, you can use the SQL GRANT/REVOKE commands to control security. See the CA Datacom/DB security documentation for more information.

Limiting Access to Rows in DQL Mode

When you need to allow users access to some, but not all, of the rows in a table, you use restricted conditions. When you restrict access by column content, you restrict access to all data within that row. For more information, see Limiting Access to Rows Using Conditions and Restrictions.

Limiting Access to Columns in DQL Mode

CA Dataquery provides the Security Administrator with the ability to restrict access to columns through CA Datacom Datadictionary profile-codes. A profile-code is a special attribute of a column entity used to put sensitive columns into categories. You and the Security Administrator should meet to decide what columns should be secured and what the profile-code should be. The profile-code must be included in the column definition in CA Datacom Datadictionary. Only users who are authorized for that profile-code can FIND and/or UPDATE data in the protected columns. For more information, see How to Limit Access to Columns.

Limiting Access to Queries in SQL Mode and DQL Mode

The Security Administrator can limit access to queries by assigning the query to a group ID or by defining a query as private. The System Option Table DQOPTLST macro parameter, QRYGRPS=, must be specified as YES so that the Security Administrator can implement the group assignments for queries. For more information, see Limiting Access to Queries.