Security Features › CA ADS Compiler Security

CA ADS Compiler Security

Compiler security for the Application Compiler (ADSA) and the Dialog Compiler (ADSC) prohibits unauthorized users from adding, modifying, displaying, or deleting applications and dialogs. The compilers perform a security check whenever a user begins a compiler session (that is, when a user specifies the name of a application/dialog to add, modify display, or delete). If the security check fails, the user cannot perform the specified action.

Security is established by using the Integrated Data Dictionary (IDD) when the following is true:

• IDD SECURITY is ON in the dictionary
• You are assigned the IDD authority through the AUTHORITY clause of the DDDL USER statement

Note: For more information on IDD security and the DDDL USER statement, see the CA IDMS IDD Quick Reference Guide.

DDDL Statements Governing Compiler Security

Security at the compiler level restricts the actions that a user can specify for any application and dialog. Security at the compiler level is governed by the following two DDDL statements:

• SET OPTIONS ... SECURITY FOR ADS IS ON/OFF— Specifies whether compiler level security is in effect. If security for CA ADS is off, the user passes the compiler level security check. If security is on and the user has not signed on to DC/UCF, the user immediately fails the security check. Otherwise, the user passes or fails the security check based on the USER statement discussed below.
• ADD/MOD USER user-name ... INCLUDE/EXCLUDE AUTHORITY FOR UPDATE/ADD/MODIFY/REPLACE/DELETE/DISPLAY IS ADS— Specifies the actions that the user has the authority to perform using the application or dialog compiler. The user passes or fails the security check depending on whether the user has specified an authorized action.

Note: For more information on the SET OPTIONS and USER statements, see the CA IDMS IDD Quick Reference Guide.

If the user fails the application or dialog compiler level security check, the compiler displays an error message. If the user passes the security check, the compiler performs a security check at the application/dialog-specific level.