Restricting Access to Rows › Assigning Row-level Security to Data Tables › Assigning Row-level Security › Considerations

Considerations

• When you initially validate an SRT entry with a group ID, ASF stores the following fields for each member of the group at validation:
  • OWNER
  • SECURITY-NAME
  • WHERE-CLAUSE
• If you change the SRT entry and a group ID is specified, ASF changes the following fields, for each member of the group, after validation:
  • OWNER
  • SECURITY-NAME
  • WHERE-CLAUSE

In either case, when fields are initially stored and when they are changed, if validation fails, then no fields are stored or changed.

Disassociating Individual from Group

• When you modify an individual SRT entry that was generated as a result of a group entry, the individual entry is disassociated from the group as defined to the $SECURITY-RUNTIME-TABLE$. If you later modify the group entry, the individual entry is not modified.
• When you modify a group entry, the group field cannot be changed.
• When you delete a group entry, all the associated member entries that were generated at validation time are also deleted from the SRT.