Batch Compiler Coding Considerations › Compiler Security › Security at the Map Level

Security at the Map Level

Security at the map level restricts the actions that a map developer can perform for the named map. If no MAP-098 record exists for the named map (that is, if no MAP statement has been issued in IDD or at system generation for the named map), the map developer immediately passes the security check. Otherwise, security is governed by the following two clauses of the MAP statement in IDD:

• PUBLIC ACCESS FOR ALL/NONE/UPDATE/MODIFY/REPLACE/DELETE/DISPLAY

  Specifies the actions that any user can specify for the named map. If the PUBLIC ACCESS clause is not included in the MAP statement or if the action requested by the map developer is allowed for any user, the developer immediately passes the security check. Otherwise, the developer passes or fails the security check based on information specified by the INCLUDE/EXCLUDE USER clause of the MAP statement (see the following description).

• INCLUDE/EXCLUDE USER user-name REGISTERED FOR PUBLIC ACCESS/ALL/UPDATE/MODIFY/REPLACE/DELETE/DISPLAY

  Specifies the actions that the map developer has the authority to specify for the named map. If the developer's user name is not included in the MAP statement, the developer immediately fails the security check. Otherwise, the map developer passes or fails the security check depending on whether the developer has authority for the action specified for the named map.

If the map developer fails the map-level security check, an error message is generated. If the developer passes the security check, the batch compiler initiates compile operations for the specified map.

Note: For more information about the MAP statement, see the CA IDMS IDD DDDL Reference Guide.