.RBS UPDATE SECACL
Allows the designer to update the RBS Access Control file directly. Added in 5.4.7 and 6.0.1. Not present in 6.0.0
Usage:
PASS <action> FIELD SHARE? N
PASS 0AD SECACL RECORD SHARE? N
GOSUB --- .RBS UPDATE SECACL
* Check for errors
IF --- .RBS UPDATE SECACL NE
Description:
<action> is ADD, CHG, DEL (case insensitive).
You have to fill in the fields in SECACL depending what you want to do:
Add, Change or Delete a Process level SECACL record
SECACL PARENT TYPE - set to one of SECDB, SECDEPT, SECWG, SECROLE, SECUSER, depending on what level of security you are setting/deleting.
SECACL PARENT RID - the record id of the associated SECDB, SECDEPT, SECWG, SECROLE, SECUSER record
SECACL PARENT AP ID - The application id of the parent process
SECACL PARENT PROC TY - The Process Type of the parent process (INPUT, OUTPUT, etc)
SECACL PARENT NAM - The name of the parent process
SECACL PROCESS TYPE - The child process type
SECACL PROCESS NAM - The child process name
SECACL RUN ALLOWED - Can the process be run Y/N/blank
SECACL ADD ALLOWED - Can records be added Y/N/blank
SECACL CHG ALLOWED - Can records be changed Y/N/blank
SECACL DELETE ALLOWED - Can records be deleted Y/N/blank
For process type MENU and USER START, the Y/N flags must be filled in. They can be left blank for other types, and they will inherit from a higher level at runtime. If you are deleting a record, you don’t need to fill in the Y/N flags, but everything else must be supplied.
Add, Change or Delete a File level SECACL record
SECACL PARENT TYPE - set to one of SECDB, SECDEPT, SECWG, SECROLE, SECUSER, depending on what level of security you are setting/deleting.
SECACL PARENT RID - the record id of the associated SECDB, SECDEPT, SECWG, SECROLE, SECUSER record
SECACL PARENT AP ID - The application id of the file.
SECACL PROCESS TYPE - Must be set to FILE
SECACL PROCESS NAM - The File name
SECACL RECORD ACCESS - Y/N flag to indicate if the file can be accessed. Cannot be blank for Add/Change.
Add, Change or Delete a Field Level SECACL record
SECACL PARENT TYPE - set to one of SECDB, SECDEPT, SECWG, SECROLE, SECUSER, depending on what level of security you are setting/deleting.
SECACL PARENT RID - the record id of the associated SECDB, SECDEPT, SECWG, SECROLE, SECUSER record
SECACL PARENT AP ID - The application id of the parent process
SECACL PARENT PROC TY - Must be FILE
SECACL PARENT NAM - The name of the file
SECACL PROCESS TYPE - Must be FIELD
SECACL PROCESS NAM - The name of the Field
SECACL FIELD ACCESS - Y/N field to indicate if the field can be accessed. Cannot be blank for Add/Change.
SECACL FIELD CHANGE - Y/N field to indicate if the field can be changed. Cannot be blank for Add/Change.
There are a lot of possible return codes in — .RBS UPDATE SECACL, most are pretty self explanatory but a few need more detail:
SECACL file not found - Couldn’t open SECACL, could be because it needs Restructuring
Prnt/Chld Not Found - The specified parent/child doesn’t exist in 0SA XREF. You might need to regenerate your applications.
SECACL Not Found - The specified SECACL record does not exist (change/delete)
Invalid Fld Acc/Chg - You have specified SECACL FIELD ACCESS = N and SECACL FIELD CHANGE = Y, which doesn’t make sense
Give this a try & let me know if you run into any problems or have questions.
Comments:
Read what other users have said about this page or add your own comments.
--
JeanNeron - 2018-09-05