search cancel

PTF # New option SEC_ALTERNATIVE_MENUAUTH added to Endevor ENCOPTBL

book

Article ID: 223858

calendar_today

Updated On:

Products

Endevor Software Change Manager (SCM) Endevor Software Change Manager - ECLIPSE Plugin (SCM) Endevor Software Change Manager - Enterprise Workbench (SCM) Endevor Software Change Manager - Natural Integration (SCM)

Issue/Introduction

A new option has been added to the ENCOPTL - SEC_ALTERNATIVE_MENUAUTH is there information on how it works 

 

Environment

Release:  18.0 18.1

Component: Endevor Software Change Manager 

Resolution

*********************************************************************** 
* THIS OPTION AFFECTS THE BEHAVIOR OF THE SECURITY. DEPENDING ON        
* CIRCUMSTANCES, IT AFFECTS HOW AND WHETHER EXIT POINT 1 CALLS DURING   
* ACTION INITIATION ARE DONE, AND, IF THE EXTERNAL SECURITY INTERFACE   
* (ESI) IS ACTIVE, IT AFFECTS HOW AND WHETHER ACTION INITIATION ESI     
* SECURITY CONTROL POINTS ARE CALLED. EXIT POINT 1 CALLS AND ESI        
* SECURITY CONTROL POINT CALLS ARE CLOSELY TIED AND THUS ARE AFFECTED   
* BY THIS OPTION THE SAME WAY. IN THE TEXT BELOW, EXIT POINT 1 CALLS    
* AND ESI SECURITY CONTROL POINT CALLS ARE REFERRED TO SIMPLY AS        
* SECURITY CALLS.                                                       
*                                                                       
* THE DEFAULT BEHAVIOR OF THE SECURITY (I.E. WHEN THIS OPTION IS OFF)   
* HAS THE FOLLOWING IDIOSYNCRASIES:                                     
*   1) FOR CERTAIN ACTIONS, THE VALUE OF THE ESI KEYWORD "MENUAUTH",    
*      ITS SYNONYM KEYWORD "ACTION", AND THE CORRESPONDING EXIT FIELD   
*      "ECBFUNC" DEPENDS ON THE STAGE WHERE THE ACTION OCCURS.          
*      THE VALUE MIGHT BE DIFFERENT FOR STAGE #1 OR ENTRY STAGE VERSUS  
*      NON-ENTRY STAGE #2.                                              
*   2) FOR THE ARCHIVE ACTION AND THE MOVE ACTION, ESI SECURITY CHECKS  
*      ARE NOT ABLE TO DISTINGUISH IF THE IMPLICIT DELETE OF            
*      THE ELEMENT IN THE SOURCE LOCATION IS GOING TO OCCUR OR IF       
*      THE "BYPASS ELEMENT DELETE" OPTION WAS SPECIFIED.                
* THIS MAY RESULT IN INSUFFICIENT GRANULARITY OR EVEN THE INABILITY TO  
* DEFINE PROPER SECURITY RULES.                                         
*                                                                       
* WHEN THIS OPTION IS ON, THE BEHAVIOR CHANGES AS FOLLOWS:              
*   1) THE VALUE OF MENUAUTH/ACTION/ECBFUNC DOES NOT DEPEND ON          
*      THE STAGE.                                                       
*   2) FOR THE ARCHIVE ACTION AND THE MOVE ACTION, SECURITY CALLS FOR   
*      THE SOURCE LOCATION USE THE MENUAUTH/ACTION/ECBFUNC VALUE        
*      "DELETE" IF THE "BYPASS ELEMENT DELETE" OPTION WAS NOT           
*      SPECIFIED; OTHERWISE, THE VALUE "RETRIEVE" IS USED.              
*                                                                       
* THE FOLLOWING TABLE SUMMARIZES ALL ACTIONS AFFECTED BY THIS OPTION.   
* THIS OPTION HAS NO EFFECT ON ACTION/STAGE/OPTIONS COMBINATIONS NOT    
* SPECIFICALLY MENTIONED IN THE TABLE.  *                                                                    
* /================================================================\ 
* |                              |  MENUAUTH/ACTION/ECBFUNC VALUE  | 
* |    ACTION, STAGE, OPTIONS    |----------------+----------------| 
* |                              |   OPTION OFF   |   OPTION ON    | 
* |==============================+================+================| 
* | ARCHIVE,                     | ARCHIVE        | DELETE         | 
* | WITH IMPLICIT DELETE         |                |                | 
* |------------------------------+----------------+----------------| 
* | ARCHIVE,                     | ARCHIVE        | RETRIEVE       | 
* | BYPASS ELEMENT DELETE        |                |                | 
* |------------------------------+----------------+----------------| 
* | DELETE,                      | MOVE           | DELETE         | 
* | NON-ENTRY STAGE #2           |                |                | 
* |------------------------------+----------------+----------------| 
* | GENERATE,                    | MOVE           | GENERATE       | 
* | NON-ENTRY STAGE #2           |                |                | 
* |------------------------------+----------------+----------------| 
* | MOVE, SOURCE LOCATION,       | MOVE           | DELETE         | 
* | WITH IMPLICIT DELETE         |                |                | 
* |------------------------------+----------------+----------------| 
* | MOVE, SOURCE LOCATION,       | MOVE           | RETRIEVE       | 
* | BYPASS ELEMENT DELETE        |                |                | 
* |------------------------------+----------------+----------------| 
* | MOVE, TARGET LOCATION,       | MOVE (*)       | ADD (*)        | 
* | NON-ENTRY STAGE #2           |                |                | 
* |------------------------------+----------------+----------------| 
* | RESTORE, TARGET LOCATION,    | MOVE           | ADD            | 
* | NON-ENTRY STAGE #2           |                |                | 
* |------------------------------+----------------+----------------| 
* | SEARCH AND REPLACE UTILITY,  |                |                | 
* | SEARCH ELEM COMPONENT LIST,  | MOVE           | UPDATE         | 
* | NON-ENTRY STAGE #2,          |                |                | 
* | OPTION UPDATE ELEMENT        |                |                | 
* |------------------------------+----------------+----------------| 
* | TRANSFER, SOURCE LOCATION,   |                |                | 
* | NON-ENTRY STAGE #2,          | MOVE           | DELETE         | 
* | WITH IMPLICIT DELETE         |                |                | 

* |------------------------------+----------------+----------------|    
* | TRANSFER, TARGET LOCATION,   | MOVE           | ADD            |    
* | NON-ENTRY STAGE #2           |                |                |    
* \================================================================/    
*                                                                       
* (*) - THIS SECURITY CALL IS DONE ONLY IF THE SEC_MOVE_TARGET OPTION   
*       IS ON. OPTIONS SEC_ALTERNATIVE_MENUAUTH AND SEC_MOVE_TARGET ARE 
*       INDEPENDENT OF EACH OTHER.                                      
*                                                                       
* NOTES:                                                                
* - WITH THIS OPTION TURNED ON, THE MENUAUTH/ACTION/ECBFUNC VALUE CAN   
*   NEVER BE "ARCHIVE" OR "MOVE".                                       
* - THE ESI KEYWORD "MENUITEM" AND THE CORRESPONDING EXIT FIELD         
*   "ECBFUNAM" ALWAYS CONTAIN THE REAL ACTION NAME AND CAN BE USED      
*   TO REFINE SECURITY RULES.                                           
*
*---------------------------------------------------------------------* 
*        ENHOPT SEC_ALTERNATIVE_MENUAUTH=ON                             
*