0LASubrRbsUpdateSecacl < Main

Tags: view all tags
---+ .RBS UPDATE SECACL

_Allows the designer to update the RBS Access Control file directly. Added in 5.4.7 and 6.0.1. Not present in 6.0.0_

<br />%TOC%
---++ Usage:
<pre>      PASS         &lt;action&gt;                   FIELD            SHARE? N
      PASS     0AD SECACL                     RECORD           SHARE? N
      PASS         &lt;Child App Id Hint&gt;        FIELD            SHARE? N
      GOSUB    --- .RBS UPDATE SECACL
      *        Check for errors
      IF       --- .RBS UPDATE SECACL         NE
</pre>
---++ Description:

This API allows the designer to directly update the RBS Access Control File (SECACL). This is provided for those installations that prefer to have their own interface to Role Based Security instead of using the one in System Administration.

&lt;action&gt; is ADD, CHG, DEL (case insensitive).

&lt;Child App Id Hint&gt; helps identify which parent / child combination you are referring to (Optional, see below).

You have to fill in the fields in SECACL depending what you want to do:

*Add, Change or Delete a Process level SECACL record*

SECACL PARENT TYPE - set to one of SECDB, SECDEPT, SECWG, SECROLE, SECUSER, depending on what level of security you are setting/deleting.<br />SECACL PARENT RID - the record id of the associated SECDB, SECDEPT, SECWG, SECROLE, SECUSER record<br />SECACL PARENT AP ID - The application id of the parent process<br />SECACL PARENT PROC TY - The Process Type of the parent process (INPUT, OUTPUT, etc)<br />SECACL PARENT NAM - The name of the parent process<br />SECACL PROCESS TYPE - The child process type<br />SECACL PROCESS NAM - The child process name<br />SECACL RUN ALLOWED - Can the process be run Y/N/blank<br />SECACL ADD ALLOWED - Can records be added Y/N/blank<br />SECACL CHG ALLOWED - Can records be changed Y/N/blank<br />SECACL DELETE ALLOWED - Can records be deleted Y/N/blank

For process type MENU and USER START, the Y/N flags must be filled in. They can be left blank for other types, and they will inherit from a higher level at runtime. If you are deleting a record, you don’t need to fill in the Y/N flags, but everything else must be supplied.

*Add, Change or Delete a File level SECACL record*

SECACL PARENT TYPE - set to one of SECDB, SECDEPT, SECWG, SECROLE, SECUSER, depending on what level of security you are setting/deleting.<br />SECACL PARENT RID - the record id of the associated SECDB, SECDEPT, SECWG, SECROLE, SECUSER record<br />SECACL PARENT AP ID - The application id of the file.<br />SECACL PROCESS TYPE - Must be set to FILE<br />SECACL PROCESS NAM - The File name<br />SECACL RECORD ACCESS - Y/N flag to indicate if the file can be accessed. Cannot be blank for Add/Change.

*Add, Change or Delete a Field Level SECACL record*

SECACL PARENT TYPE - set to one of SECDB, SECDEPT, SECWG, SECROLE, SECUSER, depending on what level of security you are setting/deleting.<br />SECACL PARENT RID - the record id of the associated SECDB, SECDEPT, SECWG, SECROLE, SECUSER record<br />SECACL PARENT AP ID - The application id of the parent process<br />SECACL PARENT PROC TY - Must be FILE<br />SECACL PARENT NAM - The name of the file<br />SECACL PROCESS TYPE - Must be FIELD<br />SECACL PROCESS NAM - The name of the Field<br />SECACL FIELD ACCESS - Y/N field to indicate if the field can be accessed. Cannot be blank for Add/Change.<br />SECACL FIELD CHANGE - Y/N field to indicate if the field can be changed. Cannot be blank for Add/Change.

There are many possible return codes in — .RBS UPDATE SECACL, most are pretty self explanatory but a few need more detail:

SECACL file not found - Couldn’t open SECACL, could be because it needs restructuring or hasn't been created for the application.<br />Prnt/Chld Not Found - The specified parent/child doesn’t exist in 0SA XREF. You might need to regenerate your applications. See [[0LASubrRbsRegen][.RBS REGEN]].<br />SECACL Not Found - The specified SECACL record does not exist (change/delete)<br />Invalid Fld Acc/Chg - You have specified SECACL FIELD ACCESS = N and SECACL FIELD CHANGE = Y, which doesn’t make sense

&lt;Child App Id Hint&gt; is used when there is more than one child of the same name for the given parent. The SECACL file is maintained in the Child's application, so the API needs to know which Application to open. The Child's Applicaiton Id is not specified in the SECACL record, so it is extrapolated from the 0SA XREF file. However, if there is more than one child with the same name for that parent, the API won't know which one you are referring to and will simply pick the first one it finds. If you pass this Application Id, then the API will know which child you are referring to. For example, consider a main system menu with options for G/L, A/R, A/P, etc. There is a good chance that all the main menus in those applications are called MAIN MENU (or similar). In that case, we have one parent (the main system menu) with several children all with the same name (MAIN MENU). You can pass the &lt;Child Ap Id Hint&gt; to indicate which child you are referring to.
---++ Comments:

_Read what other users have said about this page or add your own comments._

<br />%COMMENT%

-- Main.JeanNeron - 2018-09-05
Topic revision: r4 - 2020-05-12 - JeanNeron