Providing admin authorization in DDOL

Products

• Datacom
• Datacom/AD
• Datacom/DB

Issue/Introduction

A user needs to make data structure changes in data dictionary - are there jobs to show user information and their DDOL authorization?

Resolution

There are different ways to locate the Userid and related name (entity_name).

1- Via SQL using DBSQLPR, the requests could be:
Select entity_name, userid from sysadm.person where status = 'P';
Select entity_name, userid from sysadm.person where status = 'P' and userid = 'ABC';  (ABC is an example userid)

2- Via DDUTILTY report using SYSIN:
//SYSIN DD *
+USR DATACOM-INSTALL,NEWUSER
+RPT DETAIL,PERSON
/*
The report, among other fields, displays Userid and Name. Do a find in the report output for the userid.

3- Via the DDOL CICS transaction:
  a- signon
  b- go to Authorize and enter password (like 'Datacom-Install', 'Newuser' and then 'Newuser' on the next screen when asked to provide password). 
  c- enter 1 - Maintain Person - option will list all the Name and userid. Scroll until you find the userid.

  It displays panel T41U. It also displays column 'Profile' ($DD-ADM, $DD-UPD....etc)

  You may enter $DD-ADM in front of the userid to give that user the profile $DD-ADM. 
   $DD-ADM profile gives authority for managing (display,update) database structure.

  The following DDUTILTY SYSIN will display all userids having $DD-ADM profile:
   //SYSIN DD *
   -RPT RELAT,AUTHORIZATION,$DD-ADM(PROD)        
   -END                                          
   and replace $DD-ADM with any other profile you may want.

In Batch it is done via DDUPDATE utility using card 1010. See Article 28323 - Creating Ideal Users In Batch

DDUPDATE examples:

Note that you can ADD or DELETE, so in order to change an existing profile for an existing person you must DELETE then ADD as shown below. 

//SYSIN DD *
-USR DATACOM-INSTALL,NEWUSER 
-ADD PERSON,userid 
1010 ADD profile 
1014 password 
-UPD PERSON,userid(001),PROD 
-END 

where "profile" is a valid Datadictionary profile (e.g. $DD-ADM). 

//SYSIN DD *
-USR DATACOM-INSTALL,NEWUSER 
-UPD PERSON,test person-occ(PROD) 
1010 DEL $DD-OLD-PROFILE 
1010 ADD $DD-NEW 
-END 

Additional Information

See the Datacom documentation section Datacom Datadictionary Security Model.

See Article 28323 - Creating Ideal Users In Batch