HP 3000 Manuals HP 3000 Manuals
Access Group Menu
At the Access Group Menu (G), the menu path you choose will let you add,
change, delete, or examine access groups.
To handle access group definitions:
* Go directly to the screen you want by typing its screen name in
the Go to screen field of any menu and pressing Enter, or
* Choose a function label at the Access Group Menu (G).
The Access Group Menu looks like this.
______________________________________________________________________________________________
| |
| |
| CONFIG Access Group Menu Screen: G |
| Choose a function, or type in a screen name and press ENTER. |
| |
| |
| Add Group - Add the definition of an access group. |
| |
| Change Group - Change the definition of an access group. |
| |
| Delete Group - Delete the definition of an access group. |
| |
| Show One Group - Show the definition of one access group. |
| |
| List All Groups - List the names of all access groups. |
| |
| Done - Return to the Configuration Main Menu. |
| |
| |
| |
| |
| Go to screen |
| |
| Add Change Delete Show One List All Done |
| Group Group Group Group Groups |
| |
______________________________________________________________________________________________
Adding an Access Group Definition
Add the definition of an access group to the data dictionary at the Add
Access Group (AG) screen, shown below. Using this screen is the first
step in defining your users.
Table 6-1 describes the fields in the Add Access Group screen.
______________________________________________________________________________________________
| |
| |
| CONFIG Add Access Group Screen: AG |
| Type in the information and press ENTER. |
| |
| |
| |
| Access Group |
| |
| |
| Capability |
| |
| |
| |
| Capabilities: 1. No special capablities |
| 2. Add IMAGE databases and IMAGE tables |
| 3. Add IMAGE databases, and IMAGE tables, |
| and delete configured tables |
| |
| |
| |
| |
| |
| Help Done |
| |
| |
______________________________________________________________________________________________
Table 6-1. Table 6-1. Add Access Group Screen Fields
--------------------------------------------------------------------------------------------
| | |
| Field | Description |
| | |
--------------------------------------------------------------------------------------------
| | |
| Access Group | Name for a set of users who need to access precisely the same tables |
| | and items through Access Server. The name can be up to 16 characters |
| | long and must begin with an alpha character, followed by any |
| | combination of alphanumeric characters and/or hyphens. |
| | |
--------------------------------------------------------------------------------------------
| | |
| Capability | Level of actions this access group can perform. |
| | |
| | Capability 1. This is the default level at which users have no |
| | special capabilities. These users can see only those configured |
| | tables that are associated with their access group or to which no |
| | access groups have been assigned (these are called public tables). |
| | |
| | Capability 2. At this level, users can do everything capability-1 |
| | users can do. They can also add to the data dictionary the |
| | definitions of host HP 3000 IMAGE databases and IMAGE tables. |
| | |
| | Users add databases at the Configure Database screen in Access PC |
| | (that corresponds to the Add IMAGE Database screen in the |
| | Administrator Utility). On this screen, they specify the database |
| | name, the database password, and the MPE group and account where the |
| | database resides. |
| | |
| | They add IMAGE tables at the Configure Tables and Configure Columns |
| | screens in Access PC (that corresponds to the Add IMAGE Table screen |
| | in the Administrator Utility). On these screens, they specify the |
| | datasets and the items within datasets to be used to create their |
| | IMAGE tables. |
| | |
| | Capability 3. At this level, users can do everything capability-2 |
| | users can do. They can also delete from the data dictionary the |
| | definitions of any configured tables (IMAGE, file, or view) |
| | associated with their access group alone (using the Delete Table |
| | function label on the Remote Tables screen in Access PC). |
| | |
| | Access Server has no way to distinguish who created a configured |
| | table, so a user at capability level 3 has the power to delete IMAGE, |
| | file, or view tables that you have created. These users cannot |
| | delete public tables nor can they delete a table that has access |
| | groups in addition to their own assigned to it. |
| | |
| | When users in access groups with capabilities 2 and 3 are also DBAs |
| | (primary or secondary), they become the controlling DBA for any |
| | databases and tables they add with Access PC or the Host Batch |
| | Facility. For other users in access groups with capabilities 2 or 3, |
| | the primary DBA assumes control of databases and tables they add. |
| | |
--------------------------------------------------------------------------------------------
DBA Capabilities.
An access group definition can be added by the primary DBA or a secondary
DBA.
To Add an Access Group Definition:.
1. Go to the Add Access Group screen by typing AG in the Go to screen
field of any menu, or by choosing Add Group f1 at the Access
Group Menu.
2. Type the access group name and a capability level (if you don't
want the default of 1).
_________________________________________________________________
NOTE Granting an access group a capability other than 1 should be
done sparingly and with a great deal of careful thought as
to the consequences. You are sharing some of your powers
(and thereby losing some control over your management of
data) with any users in an access group with a capability of
2 or 3.
_________________________________________________________________
3. To add the definition, press Enter.
The access group definition is added to the data dictionary.
4. When the screen clears, you can add another access group.
5. To leave this screen, choose Done f8. This returns you to the
Access Group Menu. From there, you can go to another screen or
exit the utility.
Once you have successfully added the access group definition to the data
dictionary, use the Add User (AU) screen to configure users for that
access group.
Changing an Access Group Definition
Change an access group definition already in the data dictionary at the
Change Access Group (CG) screen. This screen displays the current
definition of the access group you specify in the same format as the Add
Access Group screen.
You can change only the Capability, not the Access Group name. (For
information about these fields, see "Adding an Access Group Definition",
above.)
To change the Access Group name, you must delete the entry (along with
any users defined for it) and add a new entry. (See "Deleting an Access
Group Definition," below.)
DBA Capabilities.
If you are a secondary DBA, you can change only an access group
definition that you control.
To Change an Access Group Definition:.
1. Go to the Change Access Group screen by typing CG in the Go to
screen field of any menu, or by choosing Change Group f2 at the
Access Group Menu.
2. Type the access group name and press Enter.
If an entry exists for this access group, the current capability
is displayed.
3. Type in any change to the Capability field.
If you decide to leave the access group definition unchanged,
choose Cancel Change f8. The screen will clear and you can
specify another access group to change or return to the Access
Group Menu.
4. To put the changes into effect, press Enter.
The existing entry for the access group is updated.
5. When the screen clears, you can change another access group
definition.
6. To leave this screen, choose Done f8. This returns you to the
Access Group Menu. From there, you can go to another screen or
exit the utility.
Deleting an Access Group Definition
Delete an unwanted access group definition at the Delete Access Group
(DG) screen.
Impact on PC Users.
Deleting an access group definition also deletes the definitions of all
users defined as part of the access group.
First the user definitions are deleted, then the access group definition.
If the next user to be deleted is currently active, the deletion
operation halts with an appropriate error message. The access group
definition remains undeleted, as do the definitions of the remaining
users (active or not) in the access group.
If this situation occurs, instruct currently active users in the access
group to exit from Access PC, then try deleting the access group again.
DBA Capabilities.
If you are a secondary DBA, you can delete only an access group that you
control.
CAUTION Before deleting an access group, review your current Access
Server security to make sure you don't inadvertently create a
public table. For example, if configured table TABLE1 has only
one access group GROUP1 assigned to it, then deleting GROUP1
makes TABLE1 a public table until you assign some other access
group to it. Similar side effects are also possible with
secured items within tables. For more information, see Chapter
8, "Configuring Security."
To Delete an Access Group Definition:.
1. Go to the Delete Access Group screen by typing DG in the Go to
screen field of any menu, or by choosing Delete Group f3 at the
Access Group Menu.
2. Type the access group name and press Enter.
The Administrator Utility looks through the data dictionary for
the access group name and any users configured for it.
If there are no users configured for the access group, it is
deleted from the dictionary.
If one or more users belong to the access group, the following
message will appear at the top of the screen:
There are users associated with this access group. The users will
be deleted when the access group is deleted. Do you really want
to delete?
Choose Yes f1 or No f8, whichever is appropriate.
_________________________________________________________________
NOTE If one of the access group's users is currently active, the
deletion process halts with an error message.
_________________________________________________________________
3. When the screen clears, you can delete another access group.
4. To leave this screen, choose Done f8. This returns you to the
Access Group Menu. From there, you can go to another screen or
exit the utility.
Examining Access Group Information
Examine information about access groups at the Show Access Group (SG)
screen and at the List Access Groups (LG) screen.
These screens provide two different ways to examine the definitions of
access groups currently defined in the data dictionary:
* Displays the definition of a specific access group (Show), or
* Displays a list of all defined access groups (List)
Whether you Show or List depends on why you are referencing the
information. The two screens are shown on the next page.
DBA Capabilities.
If you are the primary DBA, you can display both the definition of a
specific access group and a list of all defined access groups.
If you are a secondary DBA, you can display only the definition of a
specific access group that you control. You can display a list of all
defined access groups. The access groups that you control have asterisks
next to them.
______________________________________________________________________________________________
| |
| |
| CONFIG Show Access Group Screen: SG |
| Type in the information and press ENTER. |
| |
| Access Group |
| |
| Capability |
| |
| Capabilities: 1. No special capablities |
| 2. Add IMAGE databases and IMAGE tables |
| 3. Add IMAGE databases, and IMAGE tables, |
| and delete configured tables |
| |
| Users on page of |
| |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| |
| Print Previous Next Go To Help Done |
| Page Page Page |
| |
______________________________________________________________________________________________
______________________________________________________________________________________________
| |
| |
| CONFIG List Access Groups Screen: LG |
| Choose Done to return to the Access Groups Menu. |
| |
| Access Groups Page of |
| |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| _____________ _____________ _____________ _____________ |
| |
| Print Previous Next Go To Help Done |
| Page Page Page |
| |
______________________________________________________________________________________________
To Show a Particular Access Group Definition:.
1. Go to the Show Access Group screen by typing SG in the Go to
screen field of any menu, or by choosing Show Group f4 at the
Access Group Menu.
2. Type the access group name and press Enter.
The current capability level and the names of all users associated
with this access group appear on the screen.
3. If you want a printout of the access group definition, choose
Print f1.
This sends a copy to the file ADMLIST, which prints to the default
or other specified printer.
4. To see the definition of another access group, type in the new
access group name over the old one and press Enter.
5. To leave this screen, choose Done f8. This returns you to the
Access Group Menu. From there, you can go to another screen or
exit the utility.
To List All Currently Defined Access Groups:.
1. Go to the List Access Groups screen by typing LG in the Go to
screen field of any menu, or by choosing List Groups f5 at the
Access Group Menu.
An alphabetically sorted list of the names of all access groups in
the data dictionary is displayed automatically. If you are a
secondary DBA, all the access groups that you control are
indicated with an asterisk.
2. If you want a printout of the complete listing, choose Print f1.
This sends a copy of the complete list to the file ADMLIST, which
prints to the default or other specified printer.
3. To leave this screen, choose Done f8. This returns you to the
Access Group Menu. From there, you can go to another screen or
exit the utility.
For more information about a particular access group listed, go to the
Show Access Group (SG) screen. (See "To Show...", above.)