Enhanced Object Security › Define the CA IDMS Visual DBA profile › Usage

Usage

Dictionary access in Command Console

While the use of a dictionary-filter controls the dictionary against which a command stream is executed, it does not prohibit the user from entering CONNECT commands in an OCF command stream or SIGNON commands in IDD, Schema, SSC or SYSGEN command streams against any dictionary.

Similarly the absence of a usage-mode specification, implying a usage mode retrieval, does not prohibit the user from entering a SET SESSION READ WRITE command in OCF or SIGNON USAGE UPDATE command in IDD, Schema, SSC, or Sysgen.

Command consoles for the compiler processors IDD, Schema, SSC, and Sysgen should only be enabled if the access to all dictionaries is properly secured.

Note: When using the SQL processor it is not possible to issue a successful connect within the SQL command stream limiting the SQL commands to be executed against the specified dictionary only. Furthermore, while the SQL command stream can contain a SET SESSION READ WRITE command, it will not allow the user to execute SQL update statements if the dictionary access mode is not update.