Previous Topic: UID/External Data Set SecurityNext Topic: Security Module Example


SECURITY Macro

The SECURITY macro defines the access levels for all personnel who are designated as CA WA CA 7 Edition operators as follows:

A Security module should be assembled and link edited for the specific environment of the user. The module must not be linked as reentrant, reusable. CA WA CA 7 Edition must be shut down after assembling and link editing this Security module and changing the SECURITY statement in the initialization file. Then, with the startup of CA WA CA 7 Edition, this security is in effect. A sample Security module resides on the CA WA CA 7 Edition Source library with the name SASSSECI.

This macro has the following format:

name SECURITY APLID=(xxx0,nn),OPID=xxxxxxxx,TRM=xxxxxxx
   [,USRID={0|nnn}]
   [,LAST=YES]
name

Defines a name, up to eight characters, specified on the first SECURITY statement coded. The name must reflect the CSECT name for the security module. Coding and continuation follow the rules of assembler macro coding.

APLID

Specifies a CA WA CA 7 Edition application and the level of functional authority to which the designated operator is allowed access. APLID is required and has no defaults. Values must be one of the following:

xxx0

Identifies the CA WA CA 7 Edition application driver (must end in 0). For the first three characters of each application ID, see the table in the Application/Command Security topic.

nn

Indicates the function authorization level with a number from 00 to 15, with 00 being the lowest level and 15 the highest.

A sublist in the following format can specify multiple applications:

((xxx0,nn),...,(xxx0,nn))

OPID

Specifies an identification code that an operator must use when logging on to a CA WA CA 7 Edition terminal. The value must be alphanumeric, up to eight characters. OPID is required and has no default. More than one OPID can be specified in the following format:

OPID=(xxxxxxxx,...,xxxxxxxx)

Multiple OPIDs assign the same APLID and USRID information to all authorized operators for the terminal specified.

TRM

Specifies the names, in up to seven characters, of the CA WA CA 7 Edition terminals that the designated operators are authorized to use. Value must match the NAME value given on the TERM statement in the initialization file defining the terminal. All input terminals defined by TERM statements must be referenced in at least one SECURITY macro statement. TRM is required and has no default. More than one terminal name can be specified using a sublist notation of TRM=(xxxxxxx,...,xxxxxxx). A value of **ALL** propagates the specified operator definitions to all terminals defined in the initialization file. At least one TRM=**ALL** must be specified to use the Virtual Terminal feature.

USRID

(Optional) Specifies a user (ownership) identification that controls the ability of the operator to access information in the database. Value must be a number from 0 through 999. The default is 0. USRID=255 allows access to all information regardless of ownership.

LAST

(Optional) If used, specifies the last SECURITY statement in the module. The value must be YES.

An assembler END statement must appear after the last SECURITY macro. We recommend that you place a PRINT NOGEN statement before the first SECURITY macro to suppress the macro expansion printout, which can be lengthy.