How to prevent an Application from being completed via CA ESP Workload Automation Workstation?
Article ID: 52396
Updated On:
Products
Issue/Introduction
Description
How do you prevent an Application from being completed via CA ESP WA Workstation? Specifically, you need to restrict actions: "complete and release", "complete" and "complete this and prior generations".
Solution
Currently there is no way to do it. CA ESP WA does not restrict access to commands from CA ESP WA Workstation or from line/page mode. The access is controlled by the GROUP/GROUPX or APPL/APPLX profile.
For example, the command to complete an application is AJ ALL APPL(aaa) COMPLETE. If the application aaa has SAF_PROF_APPL, the command will be allowed if the user has either UPDATE access to ESP.APPL.aaa.ALL or READ access to ESP.APPLX.aaa.ALL profile. Without SAF_PROF_APPL, the check will be done for UPDATE to ESP.GROUP.ggg or for READ to ESP.GROUPX.ggg profile.
As you can see, the command name is not included in the profiles, so a command to hold or release an application will check the same profiles.
Environment
Component:
Feedback
