Retrieval

This section covers the following topics:


Purpose of Retrieval Functions

The Retrieval subsystem of Natural Security can be used to retrieve information on the objects defined to Natural Security and on the existing relationships between these objects. It allows you to review the existing security profile definitions and their effects.

With Retrieval, you cannot do any Natural Security maintenance; you may only look at things.

Invoking Retrieval Functions

Start of instruction setTo invoke retrieval functions:

  1. On the Main Menu, select Retrieval.

  2. A window will be displayed in which you mark an object type with a character or with the cursor (and, if you wish, use the Start Value and Type/Status options as described in the section Finding Your Way In Natural Security).

    The selection list for that object type will be displayed.

    The list can be scrolled as described under Finding Your Way In Natural Security.

  3. From the list, you can invoke the following retrieval functions (possible code abbreviations are underlined):

    Code Function Explanation
    DI Display These functions are the same as those described in the appropriate maintenance sections for each object type.
    XR Cross-Reference These functions are described below for each object type.

    To invoke a specific function for an object, you mark the object with the appropriate function code in column Co on the selection list.

    You may select various objects for various functions at the same time; that is, you can mark several objects on the screen with a function code. For each object marked, the appropriate processing screen will be displayed. You may then perform for one object after another the selected functions.

Cross-Reference User

This function allows you to obtain information about a user.

Start of instruction setTo do so:

  1. On the User Retrieval selection list, mark the user in question with function code XR.

  2. A window will be displayed in which you can select one or more of the following items by marking them with any character:

    Item Information Displayed
    Applications   A list of all base and compound applications to which the user is linked.
    Libraries A list of all libraries available to the user.
    Linked Libraries   A list of all libraries to which the user is linked (directly or via a group).
    DDMs / Files  A list of all DDMs to which the user's private library is linked.
    Groups / Members A list of all groups to which the user belongs. If the user is a group, a list of all users contained in that group.
    Owned Objects   A list of all security profiles of which the user is an owner.
    DDM Modifier   A list of all DDM/file security profiles in which the user is specified as "DDM Modifier".
    External Objects   A list of all external objects to which the user is linked.
    Command Processors The functional security specifications for each command processor for which functional security is defined for the user.
    Utilities   A list of all user-specific and user-library specific utility profiles defined for the user.

Cross-Reference Library

This function allows you to obtain information about a library.

Start of instruction setTo do so:

  1. On the Library Retrieval selection list, mark the library in question with function code XR.

  2. A window will be displayed in which you can select one or more of the following items by marking them with any character:

    Item Information Displayed
    DDMs / Files A list of all DDMs to which the library is linked.
    Users   A list of all users who are linked to the library.
    Command Processors The functional security specifications for each command processor in the library for which functional security is defined.
    Utilities   A list of all library-specific and user-library specific utility profiles defined for the library.

Cross-Reference File

This function is only available on mainframe computers. It allows you to ascertain which libraries are linked to a file.

Start of instruction setTo do so:

  1. On the File Retrieval selection list, mark the file in question with function code XR.

  2. A window will be displayed in which you can select one or both of the following items by marking them with any character:

    Item Information Displayed
    Libraries A list of all libraries which are linked to the file.
    Private Libraries   A list of all users whose private libraries are linked to the file.

Cross-Reference Utility

This function allows you to ascertain which utility profiles exist for a utility.

Start of instruction setTo do so:

  1. On the Utility Retrieval selection list, mark the utility in question with function code XR.

  2. A window will be displayed in which you can select one or more of the following items by marking them with any character:

    Item Information Displayed
    Library-Specific Profiles A list of all library-specific profiles defined for this utility (as well as the utility's default profile).
    User-Specific and User-Library-Specific Profiles A list of all user-specific profiles and user-library-specific profiles defined for this utility.
    All Profiles   A list of all user-specific profiles, library-specific profiles and user-library-specific profiles, as well as the default profile defined for this utility.

Cross-Reference Application

This function allows you to ascertain which users are linked to an application.

Start of instruction setTo do so:

  • On the Application Retrieval selection list, mark the application in question with function code XR.

    A list of all users who are linked to the application will be displayed.

Cross-Reference External Object

This function allows you to ascertain which users are linked to an external object.

Start of instruction setTo do so:

  • On the Retrieval selection list for a type of external object, mark the object in question with function code XR.

    A list of all users who are linked to the external object will be displayed.

Cross-Reference Mailbox

This function allows you to ascertain which users and libraries a mailbox is assigned to.

Start of instruction setTo do so:

  1. On the Mailbox Retrieval selection list, mark the mailbox in question with function code XR.

  2. A window will be displayed in which you can select one or both of the following items by marking them with any character:

    Item Information Displayed
    Libraries A list of all libraries to which the mailbox is assigned.
    Users   A list of all users to which the mailbox is assigned.

Retrieval in Batch Mode - Program RETRIEVE

You can obtain all retrieval information for all objects of a certain object type at the same time. For this purpose, the library SYSSEC provides the program RETRIEVE. This program performs the Display and Cross-Reference functions for all objects of a certain object type; that is, it shows Display and Cross-Reference information for all selected objects.

The following information can be obtained:

  • Output 1: a list of all selected objects, with basic information about each object.

  • Output 2: display of security profiles of the selected objects.

  • Output 3: cross-reference information about the selected objects.

  • Output 4: display of security profiles of special links between users and libraries.

Various input parameters allow you to restrict the functions to a certain range of objects, and to determine the sequence in which the information is to be output. The input parameters for RETRIEVE are:

Parameter Explanation
1st Parameter

Object type:

US for users,
LI for libraries,
FI for files (on mainframes only),
MA for mailboxes,
or the corresponding code for a type of external object.

2nd Parameter
  • User type (for object type US):

    A = Administrator, P = Person, M = Member, G = Group, T = Terminal, B = Batch User.

  • File status (for object type FI):

    PUBL = Public, ACCE = Access, PRIV = Private.

3rd Parameter

Start value: An object name (optionally with asterisk notation) to obtain information on a certain range of objects only.

4th and 5th Parameters

Date from/to: A range of dates to obtain information only on objects created/last modified within a specific period of time.

6th Parameter

Function: Determines which information is output, and the output sequence:

S Output 1.
A Output 1, then Output 2 & 3 for one object, then Output 2 & 3 for the next object, etc.
AE Output 1, then Output 2, 3 & 4 for one object, then Output 2, 3 & 4 for the next object, etc.
X Output 3.
XE Output 3 & 4 for one object, then Output 3 & 4 for the next object, etc.
D Output 1, then Output 2 for every object.
Z Output 1, then Output 2 for every object, then Output 3 for every object.
ZE Output 1, then Output 2 for every object, then Output 3 for every object, then Output 4 for every object.

The program RETRIEVE is primarily intended for use in batch mode. However, by issuing the direct command RETRIEVE, you can also invoke it online: a menu will be displayed for you to specify the selection options.