Authorization Check in Archiving Programs

Authorization for archiving programs is controlled using authorization object S_ARCHIVE. ADK checks this authorization when one of the following function modules is called in a program:

  • ARCHIVE_OPEN_FOR_WRITE
  • ARCHIVE_OPEN_FOR_DELETE
  • ARCHIVE_OPEN_FOR_READ
  • ARCHIVE_OPEN_FOR_MOVE

The following authorizations can be assigned per archiving object and application (for example, FI or BC):

  • 01: All authorizations
    • Write, read, and reload archive files
    • Execute delete programs
    • Change mode in archive management
  • 02: Change mode in archive management
  • 03: Read archive files; display mode in archive management


Additional application-specific authorization checks may be made for database accesses.

No comments:

topics