ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzaj3_5.4.0.1/rzaj3determineaccess.htm

68 lines
4.6 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2005" />
<meta name="DC.rights.owner" content="(C) Copyright IBM Corporation 2005" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="task" />
<meta name="DC.Title" content="How access to a function is determined" />
<meta name="abstract" content="Application Administration evaluates the access settings of a function to determine whether a user is allowed or denied access to that function." />
<meta name="description" content="Application Administration evaluates the access settings of a function to determine whether a user is allowed or denied access to that function." />
<meta name="DC.Relation" scheme="URI" content="rzaj3accesssetting.htm" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="determineaccess" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>How access to a function is determined</title>
</head>
<body id="determineaccess"><a name="determineaccess"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">How access to a function is determined</h1>
<div><p>Application Administration evaluates the access settings of a function
to determine whether a user is allowed or denied access to that function.</p>
<div class="section"> <p>All functions have a default and an all object access setting.
Functions may also have customized access settings which allow or deny specific
users and groups access to that function. </p>
<p>These are the steps Application
Administration takes to determine whether a user can access a particular function: </p>
</div>
<ol><li><span>If <span class="uicontrol">All Object Access</span> is selected for a function,
and the user has all object system privilege, the user is allowed access to
the function. If not, continue to the next step.</span></li>
<li><span>If the user is either denied or allowed access by the <span class="uicontrol">Customized
Access</span> setting, then the <strong>Customized Access</strong> setting determines
the user's access to the function. If not, then continue to the next step.</span></li>
<li><span>If the user is a member of one or more groups, then go to step
4. If not, go to step 7.</span></li>
<li id="determineaccess__step4"><a name="determineaccess__step4"><!-- --></a><span>If <span class="uicontrol">All Object Access</span> is selected
for a function, and the group has all object system privilege, then the user
can access the function. If not, then continue to the next step.</span></li>
<li id="determineaccess__step5"><a name="determineaccess__step5"><!-- --></a><span>If the user is in a group whose <span class="uicontrol">Customized
Access</span> setting is Allowed, then the user is allowed access to
the function. If not, then continue with the next group at step 4. After Application
Administration processes each group, continue to step 6.</span></li>
<li id="determineaccess__step6"><a name="determineaccess__step6"><!-- --></a><span>If the user is in a group whose <span class="uicontrol">Customized
Access</span> setting is <tt class="sysout">Denied</tt>,
then the user is denied access to the function. If not, then continue to the
next step.</span></li>
<li><span>The <span class="uicontrol">Default Access</span> setting determines the
user's access to the function.</span></li>
</ol>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzaj3accesssetting.htm" title="Each administrable function that your server supports has several associated access settings. The access settings determine whether a user is denied or allowed access to the function.">Access settings for a function</a></div>
</div>
</div>
</body>
</html>