Security Preauthorization › Assigning Status Privileges Through Preauthorization

Assigning Status Privileges Through Preauthorization

The CA Endevor/DB Security System allows an administrator to restrict the users that are allowed to assign a status to an entity. This is necessary when controlling what entities are included in a migration using status(es).

To control which users are allowed to assign a status to an entity(ies), you must mark the status as PRIVATE and then establish preauthorizations between each entitled user and the following entity:

ENTITY NAME = status-name
VERSION = 1
TYPE = STATUS

Both of these actions can be performed with either the Online front end or the Batch front end. For example, the Batch commands would be:

MODIFY STATUS NEVER-MIGRATE TYPE PRIVATE.
ADD PREAUTHORIZATION ENTITY NAME IS NEVER-MIGRATE
TYPE IS STATUS VERSION IS 1 TO USER EDBADMIN.

To accomplish this with the Online front end:

1. Select option 2 on the Pre-authorization Functions screen (ADD PREAUTHORIZATIONS). Specify an ENTITY NAME (in our example, NEVER-MIGRATE), type STATUS in the ENTITY TYPE field, and 1 in the ENTITY VERSION field. Then, specify the user to be allowed status privileges (in our case, EDBADMIN).

   CA-E/DB nn.n volser        PRE-AUTHORIZATION FUNCTIONS        mm/dd/yy  NDVRU200
   USER ===> EDBADMIN            DICTNAME ===> SRCNDVR           MODE ===> UPDATE
   OPTION ===> 2
     1  - BROWSE PRE-AUTHORIZATIONS          2  - ADD PRE-AUTHORIZATIONS
     3  - DELETE PRE-AUTHORIZATIONS          4  - MODIFY PRE-AUTHORIZATIONS
   ENTITY:                                               (IF OPTIONS 1 - 4 )
      NAME      ===> NEVER-MIGRATE
      TYPE      ===> STATUS
      VERSION   ===>    1
   USER         ===> EDBADMIN                            (IF OPTIONS 1 - 4 )
   CCID         ===>                                     (IF OPTIONS 1 - 4 )
   

   Press ENTER.

   The system responds with a Pre-authorization Detail screen.

   CA-E/DB nn.n volser          PRE-AUTHORIZATION DETAIL         mm/dd/yy  NDVRM210
   USER ===> EDBADMIN            DICTNAME ===> SRCNDVR           MODE ===> UPDATE
   ACTION ===> AUTHORIZE
   ***********************  PRE-AUTHORIZATION INFORMATION  ***********************
   DERIVE CCID ===> N                     SIGNED OUT ===> N  PRE-AUTHORIZED ===> N
   EST. WORK COMPLETION ===>              ACT. WORK COMPLETION  ===>
   COMMENT ===>
   ****************************  ENTITY INFORMATION   ****************************
   NAME    ===> NEVER-MIGRATE                                    VERSION ===>    1
   TYPE    ===> STATUS
   COMMENT ===>
   ****************************   USER INFORMATION    ****************************
   NAME         ===> EDBADMIN                                    LOCKED  ===> N
   SECURITY CLS ===> NDVR-GLOBAL
   CURRENT CCID ===>
   COMMENT ===>
   ****************************   CCID INFORMATION    ****************************
   NAME    ===>               SECURITY CLASS ===>                   LOCKED ===>
   COMMENT ===>
   

2. Press ENTER. The designated user (EDBADMIN) is now preauthorized to set or turn off the specified Status (NEVER-MIGRATE). Follow the above procedure for every user to whom you want to assign status setting privileges. The end result is a group of users that is able to set and remove the status for entities.
3. Return to the Main Function Menu and select option 6 (STATUS AND STATUS ASSOCIATIONS).

   CA-E/DB nn.n volser            MAIN FUNCTION MENU             mm/dd/yy  NDVRU000
   USER ===> EDBADMIN            DICTNAME ===> SRCNDVR           MODE ===> UPDATE
   OPTION ===> 6
                1  - SIGNIN/SIGNOUT FUNCTIONS
                2  - AUTHORIZATION FUNCTIONS
                3  - LOCK FUNCTIONS
                4  - ENTITY AND ENTITY CHANGE HISTORY
                5  - CCID AND CCID CHANGE HISTORY
                6  - STATUS AND STATUS ASSOCIATIONS
                7  - USER AND USER CHANGE HISTORY
                8  - DICTIONARY AND DICTIONARY HISTORY
                9  - MANAGEMENT GROUPS AND CCIDS
               10  - ENDEVOR/DB CONTROL FUNCTIONS
               11  - ENDEVOR/DB SIGNON FUNCTION
               12  - RETURN TO IDMS/DC
   

4. Press ENTER.

   The system responds with the STATUS FUNCTIONS screen.

5. Select option 3 (MODIFY STATUS DESCRIPTORS) and, in the STATUS field, fill in the name of the STATUS to which status privileges will be applied (NEVER-MIGRATE).

   CA-E/DB nn.n volser             STATUS FUNCTIONS              mm/dd/yy  NDVRU600
   USER ===> EDBADMIN            DICTNAME ===> SRCNDVR           MODE ===> UPDATE
   OPTION ===> 3
     1  - BROWSE STATUS DESCRIPTORS          2  - ADD A STATUS DESCRIPTOR
     3  - MODIFY STATUS DESCRIPTORS          4  - DELETE STATUS DESCRIPTORS
     5  - BROWSE STATUS/ENTITY ASSOCIATIONS  6  - ADD A STATUS/ENTITY ASSOCIATION
     7  - MODIFY STATUS/ENTITY ASSOCIATIONS  8  - DELETE STATUS/ENTITY ASSOCIATIONS
   STATUS     ===> NEVER-MIGRATE                      (IF OPTIONS 1 - 8 )
   ENTITY:                                            (IF OPTIONS 5 - 8 )
      NAME    ===> NEVER-MIGRATE
      TYPE    ===> STATUS
      VERSION ===>    1
   THE FOLLOWING VALUE IS USED WHEN STATUS IS SET WITHIN THE CONTEXT OF A CCID
   CCID       ===>                                    (IF OPTIONS 5 - 8 )
   

6. Press ENTER.

   The system responds with a STATUS DETAIL screen.

7. Change the TYPE from PUBLIC to PRIVATE.

   CA-E/DB nn.n volser               STATUS DETAIL               mm/dd/yy  NDVRM610
   USER ===> EDBADMIN             DICTNAME ===> SRCNDVR          MODE ===> UPDATE
   ACTION ===> MODIFY
   *****************************  STATUS INFORMATION  ****************************
   NAME    ===> NEVER-MIGRATE                      TYPE ===> PRIVATE
   COMMENT ===> STATUS FOR THINGS TO NEVER MIGRATE
   

   Press ENTER. The user (EDBADMIN) is now preauthorized to set or turn off NEVER-MIGRATE status for any entity.

To remove preauthorization, select option 3 (DELETE PREAUTHORIZATION) on the Pre-authorization Functions screen.