11
© 2002. Reproduction prohibited. Please inform Xephon of any infringement.
say userid 'Users connected to' 'TECHSUP'
do i=1 to userid
userid.i = value('userid'||i)
"MCINTY GET PROF("userid.i") FIELDS(NAME) NOMSG"
say 'user:' userid.i 'name:' name 'auth='value('useracs'i)
drop name
end
exit
AUTHORIZATION
Authorization required
The authorization to perform an operation is checked as follows:
• System SPECIAL users can perform any operation. (This is
optional – see the section entitled ‘Customization’ below.)
• The following group-authority will allow a user to perform the
actions described:
– GROUP-AUDITOR. Read any field in any profile owned by
the group or any su/jointfilesconvert/370325/bgroup.
– GROUP-SPECIAL. As for GROUP-AUDITOR, plus update
any USERDATA field in any profile owned by the group or
any su/jointfilesconvert/370325/bgroup.
• AUTH=CONNECT.
– Read any field in user-profiles owned directly by that group
only.
– Read any field in that group profile only.
• READ/UPDATE access to ‘Authprof’ in the ‘FIELD’ class
enables the caller to read a field (standard and userdata) or to
update a userdata field, in any resource profile in the class
specified in the Authprof. (See below for a description of
‘Authprof’.)
• The above checks are made by MCINTY explicitly before
attempting to access the data. If all of these checks fail, standard
field-level access checking will be used on the call to RACF to
access the database.
Komentáře k této Příručce