.RBS UPDATE SECACL

Allows the designer to update the RBS Access Control file directly. Added in 5.4.7 and 6.0.1. Not present in 6.0.0

Usage:

      PASS         <action>                   FIELD            SHARE? N
      PASS     0AD SECACL                     RECORD           SHARE? N
      GOSUB    --- .RBS UPDATE SECACL
      *        Check for errors
      IF       --- .RBS UPDATE SECACL         NE

Description:

<action> is ADD, CHG, DEL (case insensitive).

You have to fill in the fields in SECACL depending what you want to do:

Add, Change or Delete a Process level SECACL record

SECACL PARENT TYPE - set to one of SECDB, SECDEPT, SECWG, SECROLE, SECUSER, depending on what level of security you are setting/deleting.
SECACL PARENT RID - the record id of the associated SECDB, SECDEPT, SECWG, SECROLE, SECUSER record
SECACL PARENT AP ID - The application id of the parent process
SECACL PARENT PROC TY - The Process Type of the parent process (INPUT, OUTPUT, etc)
SECACL PARENT NAM - The name of the parent process
SECACL PROCESS TYPE - The child process type
SECACL PROCESS NAM - The child process name
SECACL RUN ALLOWED - Can the process be run Y/N/blank
SECACL ADD ALLOWED - Can records be added Y/N/blank
SECACL CHG ALLOWED - Can records be changed Y/N/blank
SECACL DELETE ALLOWED - Can records be deleted Y/N/blank

For process type MENU and USER START, the Y/N flags must be filled in. They can be left blank for other types, and they will inherit from a higher level at runtime. If you are deleting a record, you don’t need to fill in the Y/N flags, but everything else must be supplied.

Add, Change or Delete a File level SECACL record

SECACL PARENT TYPE - set to one of SECDB, SECDEPT, SECWG, SECROLE, SECUSER, depending on what level of security you are setting/deleting.
SECACL PARENT RID - the record id of the associated SECDB, SECDEPT, SECWG, SECROLE, SECUSER record
SECACL PARENT AP ID - The application id of the file.
SECACL PROCESS TYPE - Must be set to FILE
SECACL PROCESS NAM - The File name
SECACL RECORD ACCESS - Y/N flag to indicate if the file can be accessed. Cannot be blank for Add/Change.

Add, Change or Delete a Field Level SECACL record

SECACL PARENT TYPE - set to one of SECDB, SECDEPT, SECWG, SECROLE, SECUSER, depending on what level of security you are setting/deleting.
SECACL PARENT RID - the record id of the associated SECDB, SECDEPT, SECWG, SECROLE, SECUSER record
SECACL PARENT AP ID - The application id of the parent process
SECACL PARENT PROC TY - Must be FILE
SECACL PARENT NAM - The name of the file
SECACL PROCESS TYPE - Must be FIELD
SECACL PROCESS NAM - The name of the Field
SECACL FIELD ACCESS - Y/N field to indicate if the field can be accessed. Cannot be blank for Add/Change.
SECACL FIELD CHANGE - Y/N field to indicate if the field can be changed. Cannot be blank for Add/Change.

There are a lot of possible return codes in — .RBS UPDATE SECACL, most are pretty self explanatory but a few need more detail:

SECACL file not found - Couldn’t open SECACL, could be because it needs Restructuring
Prnt/Chld Not Found - The specified parent/child doesn’t exist in 0SA XREF. You might need to regenerate your applications.
SECACL Not Found - The specified SECACL record does not exist (change/delete)
Invalid Fld Acc/Chg - You have specified SECACL FIELD ACCESS = N and SECACL FIELD CHANGE = Y, which doesn’t make sense

Give this a try & let me know if you run into any problems or have questions.

Comments:

Read what other users have said about this page or add your own comments.

-- JeanNeron - 2018-09-05