The LANSA object security system can be used to control access to specific LANSA objects:
- Fields (and Forms, Reusable Parts and WAMs when relating to them on an IBM i)
- Files
- Processes
- Functions
- Partitions
- Application Templates
- Multilingual Text
- Weblets
- System Variables
Implementing security at an object level is optional and can be a significant administrative overhead.
Function level security should be used with care as this involves more run time security checking and consequently uses more system resources.
If using an IBM i Master, the Use Function level security option in the Execution and Security Settings window must be set to Y, indicate that function level security is required.
Access to all objects is controlled by the LANSA Object Maintenance system.
If using a Visual LANSA Master, right click on an object in the Repository to select the Security Settings for that object.
Within the LANSA security system there are 2 'classes' of access associated with most object types. These are:
- Definition
This class of access is applicable to fields, files, processes, functions, partitions, templates, system variables, weblets and multilingual variables. This access controls a users' right to USE, MODIFY and DELETE the definition of an object.
- DATA Access for Files
This class of access is only applicable to files. This access controls a user's right to READ, ADD, MODIFY or DELETE information (records) contained in the file.
Refer to 7.1.5 Execution and Security for security setting information.
The two object classes (DEFINITION and DATA) and the way they affect the object types is summarized in the following table.
Object Type | Access Class | Description Of Access Allowable |
|---|---|---|
FIELD COMPONENT WAM | DEF | USE: User can use the field definition. |
DATA | Data rights are not applicable. | |
FILE | DEF | USE: User can use the file definition. |
DATA | READ: User can read records from the file. | |
PROCESS or FUNCTION | DEF | USE: User can use (run) the process/function. |
DATA | Data rights are not applicable. | |
PARTITION | DEF | USE: User can access the partition. |
DATA | Data rights are not applicable. | |
TEMPLATE | DEF | USE: User can use the template. |
DATA | Data rights are not applicable. | |
SYSTEM VARIABLE | DEF | USE: User can use the system variable. |
DATA | Data rights are not applicable. | |
MULTILINGUAL VARIABLE | DEF | USE: User can use the multilingual variable. |
DATA | Data rights are not applicable. | |
WEBLET | DEF | USE: User can use the weblet. |
DATA | Data rights are not applicable. |