Restricting Access to Rows › Row-level Security Summary

Row-level Security Summary

Row-level security offers you the ability to secure individual rows of data. With row-level security, if authorized to do so by the ASF administrator, you can decide which rows of a stored table a user is allowed to see.

The row-level security functions of ASF allow you to perform the following activities:

• Assign row-level security to a table by associating a security name with the table.
• Allow a user access to certain rows of a stored table by associating a user and WHERE criteria with a security name.
• Apply the same row-level security to multiple tables by assigning the same security name to the tables.
• Apply the same row-level security to columns in different tables by assigning a generic name to the columns

Assigning row-level security to a table changes the table definition. In order to access a table with row-level security, the table must be generated or regenerated after the row-level security has been applied.

Row-level security applies to other products, as follows:

• The Information Center Management System (CA-ICMS)—Supported
• Automatic System Facility (ASF)—Supported
• OnLine Query (CA OLQ)—Supported
• CA Culprit—Supported
• Application Development System (CA ADS)—Not supported
• Device Media Language (DML)—Not supported

Note: None of the tools mentioned above will respect the row-level security defined to records that are used in any subschema except the RU subschema.