DQ Internal Security › Limiting Access to Rows Using Conditions and Restrictions › Maintaining Conditions › Using Conditions to Restrict Data

Using Conditions to Restrict Data

Summary

A restriction is a list of 1 to 40 conditions which are to be applied to the specified user or group when they access a given table.

Another method of restricting access to data is the use of profile codes. Profile codes are applied through CA Datacom Datadictionary to specific columns in a table so that only users who are related to the profile codes can access the data in a restricted column. (Data authorized users have read-only access even on columns protected by profile codes.) Conditions prevent access to a whole row based on data values.

The user and/or group(s) can access only the rows (based on the content of the data in the row) in the specified table that do not contain restricted data. The table specified in the restriction must match the table specified in each listed condition. For more information about conditions, see Maintaining Conditions. There can be only one restriction per user per table and one restriction per group per table. If an individual user is assigned both an individual and a group restriction, both are applied.

Action

Once you know which table-related conditions you want to apply to a user or group to limit their access to a particular table, select RESTRICTIONS from the Administrative Menu, or use the RESTRICT command from the command line. CA Dataquery responds by displaying the Directory of Restrictions panel. A sample Directory of Restrictions panel follows:

Directory of Restrictions (DQKX0)

=>
Place cursor on a name and press the appropriate PFkey
--------------------------------------------------------------------------DQKX0
DATAQUERY: DIRECTORY OF RESTRICTIONS   START WITH: ____________________________
-------------------------------------------------------------------------------
    USER NAME OR GROUP ID          |  TABLE NAME
-------------------------------------------------------------------------------
                                   |
                                   |
                                   |
                                   |
                                   |
                                   |
                                   |
                                   |
                                   |
                                   |
                                   |
                                   |
                                   |
                                   |
-------------------------------------------------------------------------------
<PF1>  HELP       <PF2>  RETURN       <PF3>  CREATE       <PF4>  EDIT
<PF5>  NOT USED   <PF6>  DELETE       <PF7>  BACKWARD     <PF8>  FORWARD

Action

The START WITH: field, located in the upper-right corner of this panel, is where you enter the full or partial name of the user name or group ID where you want the listing to start. When you press Enter, CA Dataquery refreshes the Directory of Restrictions panel with the user or group ID that you specified on the first line of the listing. You can also page forward using <PF8> FORWARD or backward using <PF7> BACKWARD until you reach the member that you want to view and/or edit.

Panel Description

The following list describes each column of the Directory of Restrictions panel.

USER NAME or GROUP ID

Alphabetical listing of all existing users and groups for which there is a restricted condition.

TABLE NAME

Table for which this condition has been created.

PF Keys

The following list describes the PF keys on the Directory of Restrictions panel.

Note: <PF4> EDIT and <PF6> DELETE require selecting a restriction using the cursor position.