Enabling Native Security › How CA Endevor SCM Reads the Security Tables › Resource Restrictions

Resource Restrictions

To check for restrictions that apply when performing actions, CA Endevor SCM looks in the Resource Security Table for an entry that applies to the element specified for the current action (CAELE1, for example). The match by element (resource) name is based on a full mask ($), a partial name (C$), or an exact match to the name (CAELE1).

If CA Endevor SCM does not find a table entry for the element, processing continues. If it does find a table entry for the element, CA Endevor SCM checks to see if that entry includes the system and subsystem specified in the action, matching the table entry's system/subsystem name based on a full mask, a partial name, or an exact match. If the entry includes the system/subsystem for the action request, CA Endevor SCM allows the action if the access level required for the action is specified in the table entry.

If the appropriate access level is not specified explicitly in the table entry, CA Endevor SCM does not allow the action.