Problem:
I am trying to secure GROUPs. I have this in my RHDCSRTT assembly:-
#SECRTT TYPE=ENTRY,RESTYPE=GROU,SECBY=INT
Despite this, there is seemingly no security being applied to GROUP defintions. Any user can DISPLAY and update any group.
Why is this the case?
Environment:
CA-IDMS, any release, any operating system.
Cause:
The most likely cause of this problem is that RESTYPE=SYSA is not secured.
In order for any of RESTYPEs USER, GROU, UPRF to be secured, RESTYPE SYSA must also be secured.
Resolution:
Add the following line to your RHDCSRTT input and re-assemble it:-
#SECRTT TYPE=ENTRY,RESTYPE=SYSA,SECBY=INT
Additional Information:
For further information, see the CA IDMS docops section Securing Global Resources.