SECURE PROCEDURE NAME command: Difference between revisions
m (Automatically generated page update) |
|||
| Line 34: | Line 34: | ||
<p>The SECURE PROCEDURE command secures a procedure by assigning a class to it. Access to a secured procedure is limited to users whose user classes authorize them to access the procedure class specified for the procedure. The way in which user classes are mapped to procedure classes is discussed in [[SECURE PROCEDURE ACCESS command|SECURE PROCEDURE ACCESS: Defining user privileges for secured procedures]]. This mapping can be used to restrict access to procedures that perform sensitive operations such as updating personnel records or displaying salary data.</p> | <p>The SECURE PROCEDURE command secures a procedure by assigning a class to it. Access to a secured procedure is limited to users whose user classes authorize them to access the procedure class specified for the procedure. The way in which user classes are mapped to procedure classes is discussed in [[SECURE PROCEDURE ACCESS command|SECURE PROCEDURE ACCESS: Defining user privileges for secured procedures]]. This mapping can be used to restrict access to procedures that perform sensitive operations such as updating personnel records or displaying salary data.</p> | ||
<p>If any of the procedures specified in the command are currently secured, their old procedure classes are changed to the new one. </p> | <p>If any of the procedures specified in the command are currently secured, their old procedure classes are changed to the new one. </p> | ||
<p>When it processes SECURE PROCEDURE NAME, <var class="product">Model 204</var> ends any current User Language update unit and begins a non-backoutable update unit. If a <var class="product">Model 204</var> command non-backoutable update unit is in progress, SECURE PROCEDURE NAME is included in that update unit. | <p>When it processes SECURE PROCEDURE NAME, <var class="product">Model 204</var> ends any current User Language update unit and begins a non-backoutable update unit. If a <var class="product">Model 204</var> command non-backoutable update unit is in progress, SECURE PROCEDURE NAME is included in that update unit. See [[File_Integrity_and_Recovery#Update_units_and_transactions|update units]] for more information.</p> | ||
[[Category: File manager commands]] | [[Category: File manager commands]] | ||
[[Category:Commands]] | [[Category:Commands]] | ||
Revision as of 18:18, 22 October 2013
Summary
- Privileges
- File manager
- Function
- Secures a procedure
Syntax
SECURE [PROCEDURE] NAME=procname [,procname]... PCLASS=pclass
Where:
| procname | is the name of an existing procedure to be secured. |
|---|---|
| pclass | is the number of the procedure class to be assigned to the procedure(s). The number must be in the range 1 to 255. |
Syntax notes
Commas are required.
When this command is issued, the password table should be updated by the system manager using LOGCTL with a password that has UCLASS associated with it.
Example
SECURE PROCEDURE NAME = PAY PCLASS = 7 SECURE NAME = EMPLOY, PERSNEL PCLASS = 8
Usage notes
The SECURE PROCEDURE command secures a procedure by assigning a class to it. Access to a secured procedure is limited to users whose user classes authorize them to access the procedure class specified for the procedure. The way in which user classes are mapped to procedure classes is discussed in SECURE PROCEDURE ACCESS: Defining user privileges for secured procedures. This mapping can be used to restrict access to procedures that perform sensitive operations such as updating personnel records or displaying salary data.
If any of the procedures specified in the command are currently secured, their old procedure classes are changed to the new one.
When it processes SECURE PROCEDURE NAME, Model 204 ends any current User Language update unit and begins a non-backoutable update unit. If a Model 204 command non-backoutable update unit is in progress, SECURE PROCEDURE NAME is included in that update unit. See update units for more information.