ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Restricting SUBMIT access in Dataquery

book

Article ID: 226280

calendar_today

Updated On:

Products

Datacom/DB Datacom

Issue/Introduction

We have a requirement to restrict SUB command option in Online DQRY for few selected Users in production. This SUB command has functionality to submit query in batch mode and we want to disable this functionality for some of our team members, so they can only execute query in online mode. Can you please advise if it can be done.

Environment

Component : Dataquery 

Component : Datacom/DB

Resolution

This process applies to all users who have been defined so that they can Edit a query online, and once ready, they can:

  • Press PF3 to execute the query
  • Enter SUB to submit a batch job from CICS now
  • Enter SUB with a deferred time to queue the query for later batch execution

The objective here is to restrict some users from this functionality to enter SUB with either option, so the only option they have is to press PF3. Other "special" users will maintain all of the above capabilities. In order to implement this, you need to change their user profile. This also assumes that you are managing Dataquery access internally, and not through Datacom External Security.

To make this change, the Dataquery administrator will enter the command USERS, scroll to the user who needs to be changed, and press PF4 to edit that user's profile.

In the middle of the screen is a section called DQ SYSTEM STATUS. Change the value of SUBMIT ALLOWED from Y to N, and then press PF3 to update that user. 

DQ SYSTEM STATUS.         
 DATA AUTHORIZED     : Y  
 SUBMIT ALLOWED      : N  
SQL AND DQL ALLOWED : Y

When they log in again, and try to submit a query, they will receive this error:

=> SUB                                                             
DQ011E - EITHER THE COMMAND IS UNKNOWN, OR AUTHORIZATION IS DENIED

Additional Information

As always, please contact Broadcom support for Datacom if you have further questions.