69 lines
6.2 KiB
HTML
69 lines
6.2 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
|||
|
|
<!DOCTYPE html
|
|||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|||
|
|
<html lang="en-us" xml:lang="en-us">
|
|||
|
|
<head>
|
|||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|||
|
|
<meta name="security" content="public" />
|
|||
|
|
<meta name="Robots" content="index,follow" />
|
|||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|||
|
|
<meta name="DC.Type" content="concept" />
|
|||
|
|
<meta name="DC.Title" content="Limit access to program functions" />
|
|||
|
|
<meta name="abstract" content="The limit access to program function allows you to define who can use an application, the parts of an application, or the functions within a program." />
|
|||
|
|
<meta name="description" content="The limit access to program function allows you to define who can use an application, the parts of an application, or the functions within a program." />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvsetusersec.htm" />
|
|||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
|||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
|||
|
|
<meta name="DC.Format" content="XHTML" />
|
|||
|
|
<meta name="DC.Identifier" content="limitaccessprogfunc" />
|
|||
|
|
<meta name="DC.Language" content="en-us" />
|
|||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|||
|
|
<!-- US Government Users Restricted Rights -->
|
|||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|||
|
|
<title>Limit access to program functions</title>
|
|||
|
|
</head>
|
|||
|
|
<body id="limitaccessprogfunc"><a name="limitaccessprogfunc"><!-- --></a>
|
|||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|||
|
|
<h1 class="topictitle1">Limit access to program functions</h1>
|
|||
|
|
<div><p>The limit access to program function allows you to define who can use an application, the parts of an application, or the functions within a program.</p>
|
|||
|
|
<p>The limit access to program function allows you to provide security for the program when you do not have an object to secure for the program. There are two methods that you can use to manage user access to application functions through iSeries™ Navigator.</p>
|
|||
|
|
<div class="p">The first method uses Application Administration: <ol><li>Right-click the system that contains the function whose access setting you want to change.</li>
|
|||
|
|
<li>Select <span class="uicontrol">Application Administration</span>.</li>
|
|||
|
|
<li>If you are on an administration system, select <span class="uicontrol">Local Settings</span>. Otherwise, continue with the next step.</li>
|
|||
|
|
<li>Select an administrable function.</li>
|
|||
|
|
<li>Select <span class="uicontrol">Default Access</span> to allow all users to access the function by default.</li>
|
|||
|
|
<li>Select <span class="uicontrol">All Object Access</span> to allow all users with all object system privilege to access this function.</li>
|
|||
|
|
<li>Select <span class="uicontrol">Customize</span>and use the <span class="uicontrol">Add</span> and <span class="uicontrol">Remove</span> buttons on the <span class="uicontrol">Customize Access</span> dialog to add or remove users or groups in the <span class="uicontrol">Access Allowed</span> and <span class="uicontrol">Access Denied</span> lists.</li>
|
|||
|
|
<li>Select <span class="uicontrol">Remove Customization</span> to delete any customized access for the selected function.</li>
|
|||
|
|
<li>Click <span class="uicontrol">OK</span> to close the <span class="uicontrol">Application Administration</span> dialog.</li>
|
|||
|
|
</ol>
|
|||
|
|
</div>
|
|||
|
|
<div class="p">The second method of managing user access uses iSeries Navigator’s Users and Groups: <ol><li>In iSeries Navigator, expand <span class="uicontrol">Users and Groups</span>.</li>
|
|||
|
|
<li>Select <span class="uicontrol">All Users</span>, <span class="uicontrol">Groups</span>, or <span class="uicontrol">Users Not in a Group</span> to display a list of users and groups.</li>
|
|||
|
|
<li>Right-click a user or group, and select <span class="uicontrol">Properties</span>.</li>
|
|||
|
|
<li>Click <span class="uicontrol">Capabilities</span>.</li>
|
|||
|
|
<li>Click the <span class="uicontrol">Applications</span> tab.</li>
|
|||
|
|
<li>Use this page to change the access setting for a user or group.</li>
|
|||
|
|
<li>Click <span class="uicontrol">OK</span> twice to close the <span class="uicontrol">Properties</span> dialog.</li>
|
|||
|
|
</ol>
|
|||
|
|
</div>
|
|||
|
|
<div class="important"><span class="importanttitle">Important:</span> The limit access to program function does not prevent a user from accessing a resource, such as a file or program, from another interface. You still need to use resource security.</div>
|
|||
|
|
<div class="p">The limit access to program function support provides APIs to: <ul><li>Register a function</li>
|
|||
|
|
<li>Retrieve information about the function</li>
|
|||
|
|
<li>Define who can or cannot use the function</li>
|
|||
|
|
<li>Check to see if the user is allowed to use the function</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
<p>To use this function within an application, the application provider must register the functions when the application is installed. The registered function corresponds to a code block for specific functions in the application. When the user runs the application, the application calls the check usage API to see if the user is allowed to use the function that is associated with the code block, before invoking the code block. If the user is allowed to use the registered function, the code block is run. If the user is not allowed to use the function, the user is prevented from running the code block.</p>
|
|||
|
|
<p>The system administrator specifies who is allowed or denied access to a function. The administrator can either use the Work with Function Usage Information (WRKFCNUSG) command to manage the access to program function, or the iSeries Navigator.</p>
|
|||
|
|
</div>
|
|||
|
|
<div>
|
|||
|
|
<div class="familylinks">
|
|||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvsetusersec.htm" title="Setting up user security involves installing application libraries, and setting up user groups and profiles.">Set up user security</a></div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</body>
|
|||
|
|
</html>
|