CA Dataquery profile code report

Products

• Datacom

Issue/Introduction

You are using Profile Codes in CA Dataquery and want to generate a report (not using SQL) containing all Dataquery profile codes and the fields they relate to.

Environment

Release : 15.1

Component : CA DATACOM DATADICTIONARY

                      CA Dataquery 

Resolution

Run this CA Dataquery DQL query 

FIND ALL DDFIELD                                 
WITH ENTITY-TYPE = 'FLD' AND STATUS = 'P' AND    
      PROFILE-CODE > '  '    AND ELM-NAME = '  '      
PRINT ENTITY-NAME  PROFILE-CODE RECORD-NAME  

Additional Information

Profile codes are used to restrict access to data in a specific column. Effective use of profile codes allows you to prohibit unwarranted access to sensitive data at the column level.

A PROFILE-CODE is a  

CA Datacom® Datadictionary™

  attribute of the FIELD entity-type used by  

CA Dataquery 

 to classify fields (columns) into various security groups. Once the profile-code is established and included in the field definition, only users who are authorized for that profile-code can FIND and/or UPDATE data in the protected fields. The assignment of profile codes controls which fields the user sees on the Display Fields panel, unless the user is Data Authorized. If Data Authorized=yes on the User Authorization panel, the user can display fields but cannot update if they are protected by a profile-code.

At installation, all

CA Datacom® Datadictionary™

  FIELD entity-occurrences have a null profile-code. This means that once table level authorization is granted to a user, that user has the ability to FIND every field (column) in that table. If you assign a profile-code to a column however, only those users authorized for that profile-code can FIND and/or UPDATE that column.

If a simple column is named in a query and does not have a profile-code assigned, it is secured by the profile-code of its parent or grandparent, if one exists. If these columns do not have profile codes, the simple columns stated in the query are unprotected and available to any user with table level authorization.

If a compound field is named in a query and does not have a profile-code assigned, it receives a profile-code belonging to its parents or grandparents if one exists. If its parents or grandparents do not have a profile-code, the code of its children or grandchildren is in effect. If none of these fields has a profile-code, the field is unprotected and available to any user with table level authorization. If a compound field has a profile-code assigned, be aware that all columns that make up the compound column have the same profile-code.