Previous Topic: Restricting ASF UsersNext Topic: Limiting Row-level Security Authorization


Limiting Passkey Authorization

When a user is defined in IDD as having authority for ASF, the user automatically has full passkey authorization. An ASF administrator can limit what a user can do through ASF by disallowing some of the user's global passkeys. The restrictions apply throughout the ASF system, not only to the user's own tables, but also to tables owned by others. The passkey authorization a user has for ASF determines the passkeys the user can be granted by other users.

For example, if the DBA wanted to prevent you from defining tables through ASF, the administrator would disallow the global CREATE passkey for your user ID. Without a CREATE passkey:

However, you can own tables that have been defined for you, and you can also be given access to tables owned by others.

How To Do It

To limit a user's passkey authorization, do the following:

  1. Access the User Limits and Defaults screen
  2. Enter the user's ID in the User Name field
  3. Type n next to the passkey(s) being disallowed