IDMS Security for GROUPs not working

Products

• IDMS
• IDMS - Database
• IDMS - ADS

Issue/Introduction

The RHDCSRTT assembly contains:

#SECRTT TYPE=ENTRY,RESTYPE=GROU,SECBY=INT

Despite this, there is seemingly no security being applied to GROUP definitions. Any user can DISPLAY and update any group.

Environment

IDMS - all supported releases

Cause

The most likely cause of this problem is that RESTYPE=SYSA is not secured.

In order for any of RESTYPEs USER, GROU, UPRF to be secured, RESTYPE SYSA must also be secured.

Resolution

Add the following line to your RHDCSRTT input and re-assemble it:

#SECRTT TYPE=ENTRY,RESTYPE=SYSA,SECBY=INT

Then GRANT SYSADMIN to all Users/Groups that should have this privilege.

Additional Information

Securing Global Resources