Securing Application Dictionary Resources › Compiler Security Within the Dictionary › Checking Compiler Security

Checking Compiler Security

Turning on Compiler Security

Compiler security is turned on or off through the IDD DDDL statement, SET OPTIONS FOR DICTIONARY SECURITY FOR IDMS IS ON/OFF. (Note that this IDD DDDL statement also turns verb security on or off: compiler security and verb security cannot be set independently.)

How the Compiler Checks the User

To determine who is issuing the statement, the compiler looks at the user name specified in the SIGNON statement. If the SIGNON statement is not issued or does not include the USER clause, the user name defaults to the following:

• The system signon ID of the user
• The ID in SET OPTIONS DEFAULT PREPARED BY/REVISED BY user-name

Definition of an Authorized User

An authorized user, for this function, is one whose description in the dictionary includes authority to use the compiler. Compiler authority is assigned through one of the following IDD DDDL USER statements (use MODIFY for existing user descriptions):

ADD USER NAME IS user-ID
    AUTHORITY FOR any verb      assigns authority to use both
        IS ALL.                  compilers

ADD USER NAME IS user-ID
    AUTHORITY FOR any verb      assigns authority to use both
        IS IDMS.                 compilers

ADD USER NAME IS user-ID
    AUTHORITY FOR any verb      assigns authority to use the
        IS SCHEMA.               schema compiler only

ADD USER NAME IS user-ID
    AUTHORITY FOR any verb      assigns authority to use the
        IS SUBSCHEMA.            subschema compiler only