Authorizing User Access to Objects

This section describes how to grant users access authorization to an object. It covers the following topics:


Authorization List

Every defined object in Entire Output Management is associated with an authorization list for that object. Authorization can be granted to an individual user or to a group of users in a distribution list.

The authorization list for an object contains user IDs and/or the names of distribution lists. Each user or distribution list can have a different access level to that object.

The authorization list can be modified by:

  • an Entire Output Management administrator,

  • the Owner of the object,

  • a user who was granted the Owner option,

  • a user in a distribution list that was granted the Owner option.

For more information on how to define users in Entire Output Management, see the section Users in the System Administration documentation.

Start of instruction set To authorize user access to an object:

  1. On an object maintenance screen, enter the line command AU next to the object for which you want to authorize user access.

    The Authorization List window is displayed:

    +----------------------------------------------------------+
    !  Authorization List  Report - UEX-GO                     !
    !                                                          !
    !  Cmd     User ID     Own Mod Pur Dis Arc Rev             !
    !   __     GW           Y   Y   Y   Y   Y   Y              !
    !   __                                                     !
    !   __                                                     !
    !   __                                                     !
    !   __                                                     !
    !   __                                                     !
    !   __                                                     !
    !   __                                                     !
    !   __                                                     !
    !   __                                                     !
    !                                                          !
    ! All                                                      !
    !  Command => ___________________________________________  !
    !  DE Delete  MO Modify                                    !
    ! Enter-PF1---PF2---PF3---PF5---PF6---PF7---PF8---PF12-    !
    !       Help  Add   End               Up    Down  Menu     !
    +----------------------------------------------------------+
    

    It lists all users or user groups on distribution lists authorized for the object. It also displays their authorization level. The example above lists all users authorized for a report.

  2. You can add users to the authorization list, delete them from the authorization list or modify the authorization level for a given user.

    Field Explanation
    User ID The user ID or the distribution list which is authorized to access the object.
    Own, Mod, Pur, Dis, Arc, Rev

    A Y or N here indicates whether the user is allowed to perform these functions with the object or not.

    For an explanation of the functions, see Grant Options below.

Adding a User to an Authorization List

Authorization to handle an object can be granted by the object owner to other users or to PUBLIC (all users).

Start of instruction set To add a user or group of users to the authorization list for an object:

  1. Press PF2 (Add) in the Authorization List window.

    The Authorization Definition window is displayed:

    +-----------------------------------------------+
    !         - Authorization Definition -          !
    !                                               !
    ! Object Type: Report                           !
    ! Object Name: UEX-GO                           !
    ! Granted User ID ....: ________                !
    ! Grant Options:                                !
    !    Owner ....: _                              !
    !    Modify ...: _                              !
    !    Purge ....: _                              !
    !    Display ..: _                              !
    !    Archive ..: _                              !
    !    Revive ...: _                              !
    !                                               !
    !  Command => ______________________________    !
    ! Enter-PF1---PF2---PF3---PF5---PF9----PF12--   !
    !       Help  Add   End   Do    Ext    Menu     !
    +-----------------------------------------------+
  2. In this window, you can grant authorization to individual users or to groups of users on a distribution list. You can allow/disallow individual functions. The fields are described under Authorization Options.

Modifying a User Authorization

Start of instruction set To modify a user authorization:

  1. In the Authorization List window, enter the line command MO next to the user whose authorization you want to modify.

    The Authorization Definition window is displayed.

  2. In this window, you can grant authorization to the user. You can allow/disallow individual functions. The fields are described under Authorization Options.

Deleting a User from an Authorization List

Start of instruction set To delete a user from an authorization list:

  1. In the Authorization List window, enter the line command DE next to the user for whom you want to delete authorization.

  2. Depending on the CONFIRM option (see SET command), you may be prompted to confirm the deletion.

Authorization Options

In an Authorization Definition, you can specify the following:

Field Explanation
Granted user ID

The user ID or name of distribution list to which authorization is granted.

If you enter a question mark (?), a window will be displayed, in which you press PF4 to display a selection list of users or PF5 to display a selection list of distribution lists.

In an existing authorization definition, the value of this field cannot be changed.

Grant options

Enter Y to allow a function, or N to disallow a function:

  • Owner - The user can perform all functions and authorize other users for this object.

  • Modify - The user can display and modify this object.

  • Purge - The user can display, modify and delete this object, but cannot authorize other users.

  • Display - The user can only display this object.

For folders only:

  • Archive - The user can archive active reports contained in the folder.

  • Revive - The user can revive the folder's active reports from the archive.