Enhanced Object Security › Define the CA IDMS Visual DBA profile › Parameters

Previous Topic: Syntax

Next Topic: Usage

Parameters

dom-object-profile-line

Specifies a root branch of the DOM tree, an optional instance filter and also optional permitted operations. Each dom-object-profile-line must be completely coded on one, separate text line of the CA IDMS Visual DBA profile module. The order of the dom-object-profile-line lines is also the order of the root branches in the DOM tree. Space characters, except when used before or in the dom-object, indicate the start of comment text.

cmd-console-profile-line

Specifies the availability of a command console processor and optionally a filter to limit the CA IDMS Visual DBA list of available dictionaries. Each cmd-console-profile-line must be completely coded on one, separate text line of the CA IDMS Visual DBA profile module. Space characters, except when used before or in the starting 'Cmd Console' string, indicate the start of comment text.

dom-object

This is the name of the object that becomes a root branch of the DOM tree.

The name is formed of all characters starting with the first non-blank character up to either an open square bracket or “[“, an open parenthesis or “(“, a slash (“/”) or the end of the line. The name must match an object from the CA IDMS Visual DBA tree as listed in CA IDMS Objects in Chapter 1 “Introduction to CA IDMS Visual DBA” with either 0, 1, 2, or 3 level parents. An object must have as many parent instances specified as required by its parent level.

parent-instance

This is the instance of a parent object of the object defined as a root branch of the DOM tree. If more than one parent-instance needs to be specified because the parent level of the DOM object is greater than one, the parent-instance of the parent at the highest level must be specified first, then the one at the next level, and so on.

filter

Specifies a pattern (character string) that must be matched by the instances of the DOM object. The following wildcard characters are available:

? (question-mark)

Represents a single character.

* (asterisk)

Represents any string of zero or more characters

permitted-ops

Specifies the operations that are permitted on the DOM object. View or display is automatically permitted. The additional permissions are listed in the table:

Code

Operation

Description

A

Alter

The Alter dialog can be invoked and executed

C

Create

The Create dialog can be invoked and executed

D

Drop

The Drop dialog can be invoked and executed

F

Full

All dialogs can be invoked and executed, equivalent to “SU”

S

Security

The Grant, Revoke, Register, and Responsibilities dialogs can be invoked and executed. Object expansion contains Grantee, Registree, and Responsible where applicable.

U

Update

The Alter, Create, and Drop dialogs can be invoked and executed, equivalent to “ACD”

Note: In order to Alter, Create or Drop a Central User, a Group or a Dictionary User, the S(Security) permission is also required.

Cmd Console DCMT
Cmd Console DCUF
Cmd Console IDD
Cmd Console OCF
Cmd Console SQL
Cmd Console SSC
Cmd Console Schema
Cmd Console Sysgen

Specifies a command console and processor that can be executed.

dictionary-filter

Specifies a pattern (character string) that must be matched by the dictionary selected in the command console, in order to be able to execute the commands from the associated command console processor. The following wildcard characters are available:

? (question-mark)

Represents a single character.

* (asterisk)

Represents any string of zero or more characters.

(U)

If specified the dictionary is accessed in update mode, else in retrieval mode.