Endevor BC1TNEQU - are PDYNAMIC and ALTER valid for C1ACTNS?
search cancel

Endevor BC1TNEQU - are PDYNAMIC and ALTER valid for C1ACTNS?

book

Article ID: 212003

calendar_today

Updated On:

Products

Endevor

Issue/Introduction

In the Endevor ESI Table (BC1TNEQU) the FUNCEQU table for this is below. There appears to be no documentation to determine if PDYNAMIC or ALTER are valid for C1ACTNS.

FUNCEQU SAFAUTH=NONE,                                      
      C1ACTNS=(PDYNAMIC,ALTER)
FUNCEQU SAFAUTH=READ,                                      
      C1ACTNS=(DISPLAY,RETRIEVE,SIGNIN,PBACKOUT,PCAST,     
      PCOMMIT,PCREATE,PDISPLAY,PEXECUTE,PLIST,PMODIFY,     
      PREVIEW,PSHIP,PUTILITY)
FUNCEQU SAFAUTH=CONTROL,                                   
      C1ACTNS=(SIGNOVR)
FUNCEQU SAFAUTH=UPDATE,                                    
      C1ACTNS=(ADD,DELETE,MOVE,GENERATE,UPDATE)
FUNCEQU SAFAUTH=ALTER,                                     
      C1ACTNS=(ARCHIVE,ENVRNMGR)

Environment

Release : 18.0 18.1 

Component : CA Endevor Software Change Manager

Resolution

PDYNAMIC: 

PDYNAMIC is an ESI c1access level for dynamic approvers. If the Dynamic Approvers option is enabled in the ENDEVOR Options Table (ENCOPTBL), then package approvers can add additional users as one-time approvers for a particular package while it is in the in-approval state.   

ALTER:

The Alter action has been added to the list of C1ACTNS entries you can specify in the BC1TNEQU table.  The updated version of the delivered table specifies the following:                                                     
                                                                             
FUNCEQU SAFAUTH=ALTER,C1ACTNS=(ALTER)                                        
                                                                             
The above entry would restrict access to the Alter Action to users who have  ALTER authority for the pseudo data set.                                     
                                                                             
NOTE:  If NO entry is specified for this action in your BC1TNEQU table, then ANYONE can use the Alter action. You must add this statement into your BC1TNEQU table if you want to restrict access to the Alter Action.  

For more information on the Endevor External Security Interface (ESI) review the link to the documentation below: 

https://techdocs.broadcom.com/us/en/ca-mainframe-software/devops/ca-endevor-software-change-manager/18-1/securing/functional-security.html