New option SEC_ALTERNATIVE_MENUAUTH added to Endevor ENCOPTBL
Article ID: 223858
Updated On:
Products
Issue/Introduction
A new option has been added to the ENCOPTL - SEC_ALTERNATIVE_MENUAUTH. Is there information on how it works?
Environment
Release: All Supported Releases
Resolution
The option was delivered via PTF LU03350 for V18.0 and LU03349 for V18.1.
***********************************************************************
* THIS OPTION AFFECTS THE BEHAVIOR OF THE SECURITY. DEPENDING ON
* CIRCUMSTANCES, IT AFFECTS HOW AND WHETHER EXIT POINT 1 CALLS DURING
* ACTION INITIATION ARE DONE, AND, IF THE EXTERNAL SECURITY INTERFACE
* (ESI) IS ACTIVE, IT AFFECTS HOW AND WHETHER ACTION INITIATION ESI
* SECURITY CONTROL POINTS ARE CALLED. EXIT POINT 1 CALLS AND ESI
* SECURITY CONTROL POINT CALLS ARE CLOSELY TIED AND THUS ARE AFFECTED
* BY THIS OPTION THE SAME WAY. IN THE TEXT BELOW, EXIT POINT 1 CALLS
* AND ESI SECURITY CONTROL POINT CALLS ARE REFERRED TO SIMPLY AS
* SECURITY CALLS.
*
* THE DEFAULT BEHAVIOR OF THE SECURITY (I.E. WHEN THIS OPTION IS OFF)
* HAS THE FOLLOWING IDIOSYNCRASIES:
* 1) FOR CERTAIN ACTIONS, THE VALUE OF THE ESI KEYWORD "MENUAUTH",
* ITS SYNONYM KEYWORD "ACTION", AND THE CORRESPONDING EXIT FIELD
* "ECBFUNC" DEPENDS ON THE STAGE WHERE THE ACTION OCCURS.
* THE VALUE MIGHT BE DIFFERENT FOR STAGE #1 OR ENTRY STAGE VERSUS
* NON-ENTRY STAGE #2.
* 2) FOR THE ARCHIVE ACTION AND THE MOVE ACTION, ESI SECURITY CHECKS
* ARE NOT ABLE TO DISTINGUISH IF THE IMPLICIT DELETE OF
* THE ELEMENT IN THE SOURCE LOCATION IS GOING TO OCCUR OR IF
* THE "BYPASS ELEMENT DELETE" OPTION WAS SPECIFIED.
* THIS MAY RESULT IN INSUFFICIENT GRANULARITY OR EVEN THE INABILITY TO
* DEFINE PROPER SECURITY RULES.
*
* WHEN THIS OPTION IS ON, THE BEHAVIOR CHANGES AS FOLLOWS:
* 1) THE VALUE OF MENUAUTH/ACTION/ECBFUNC DOES NOT DEPEND ON
* THE STAGE.
* 2) FOR THE ARCHIVE ACTION AND THE MOVE ACTION, SECURITY CALLS FOR
* THE SOURCE LOCATION USE THE MENUAUTH/ACTION/ECBFUNC VALUE
* "DELETE" IF THE "BYPASS ELEMENT DELETE" OPTION WAS NOT
* SPECIFIED; OTHERWISE, THE VALUE "RETRIEVE" IS USED.
*
* THE FOLLOWING TABLE SUMMARIZES ALL ACTIONS AFFECTED BY THIS OPTION.
* THIS OPTION HAS NO EFFECT ON ACTION/STAGE/OPTIONS COMBINATIONS NOT
* SPECIFICALLY MENTIONED IN THE TABLE. *
* /================================================================\
* | | MENUAUTH/ACTION/ECBFUNC VALUE |
* | ACTION, STAGE, OPTIONS |----------------+----------------|
* | | OPTION OFF | OPTION ON |
* |==============================+================+================|
* | ARCHIVE, | ARCHIVE | DELETE |
* | WITH IMPLICIT DELETE | | |
* |------------------------------+----------------+----------------|
* | ARCHIVE, | ARCHIVE | RETRIEVE |
* | BYPASS ELEMENT DELETE | | |
* |------------------------------+----------------+----------------|
* | DELETE, | MOVE | DELETE |
* | NON-ENTRY STAGE #2 | | |
* |------------------------------+----------------+----------------|
* | GENERATE, | MOVE | GENERATE |
* | NON-ENTRY STAGE #2 | | |
* |------------------------------+----------------+----------------|
* | MOVE, SOURCE LOCATION, | MOVE | DELETE |
* | WITH IMPLICIT DELETE | | |
* |------------------------------+----------------+----------------|
* | MOVE, SOURCE LOCATION, | MOVE | RETRIEVE |
* | BYPASS ELEMENT DELETE | | |
* |------------------------------+----------------+----------------|
* | MOVE, TARGET LOCATION, | MOVE (*) | ADD (*) |
* | NON-ENTRY STAGE #2 | | |
* |------------------------------+----------------+----------------|
* | RESTORE, TARGET LOCATION, | MOVE | ADD |
* | NON-ENTRY STAGE #2 | | |
* |------------------------------+----------------+----------------|
* | SEARCH AND REPLACE UTILITY, | | |
* | SEARCH ELEM COMPONENT LIST, | MOVE | UPDATE |
* | NON-ENTRY STAGE #2, | | |
* | OPTION UPDATE ELEMENT | | |
* |------------------------------+----------------+----------------|
* | TRANSFER, SOURCE LOCATION, | | |
* | NON-ENTRY STAGE #2, | MOVE | DELETE |
* | WITH IMPLICIT DELETE | | |
* |------------------------------+----------------+----------------|
* | TRANSFER, TARGET LOCATION, | MOVE | ADD |
* | NON-ENTRY STAGE #2 | | |
* \================================================================/
*
* (*) - THIS SECURITY CALL IS DONE ONLY IF THE SEC_MOVE_TARGET OPTION
* IS ON. OPTIONS SEC_ALTERNATIVE_MENUAUTH AND SEC_MOVE_TARGET ARE
* INDEPENDENT OF EACH OTHER.
*
* NOTES:
* - WITH THIS OPTION TURNED ON, THE MENUAUTH/ACTION/ECBFUNC VALUE CAN
* NEVER BE "ARCHIVE" OR "MOVE".
* - THE ESI KEYWORD "MENUITEM" AND THE CORRESPONDING EXIT FIELD
* "ECBFUNAM" ALWAYS CONTAIN THE REAL ACTION NAME AND CAN BE USED
* TO REFINE SECURITY RULES.
**---------------------------------------------------------------------*
* ENHOPT SEC_ALTERNATIVE_MENUAUTH=ON
*
Feedback
