|
Query Security |
By default, no security is assigned to a query. This means that all users can view all data that can be displayed via a Query Definition. Security can be added to the Query Definition through the NOMADS Security Manager by using security classifications to identify and control user access.
Three levels of security can be set up for a query:
The top level of security determines whether the query can be displayed at all.
The initial setting at this level is dependent on the Security setting on the main file in Data Dictionary Maintenance (on the Utilities menu). If file security is set and the file is selected when initially creating a new query, the file security setting may be applied to the query. This setting can be changed on an individual query by selecting the Security button on the Query Definition toolbar.
If security is set at this level and fails at run time, then the query will not be invoked. In the case of a query associated with a Multi-Line control (see Multi-Line Properties), no query button will be drawn.
The second level of security is at the link file level.
The initial setting at this level is dependent on the Security setting on the file in Data Dictionary Maintenance (on the Utilities menu). If file security is set and the file is selected when initially creating a new query file link, the file security setting automatically displays in the Security column of the Query File Link grid. This setting can be changed by selecting the dotted button in the Security column.
If security is set at this level and fails at run time, then the fields from this file, which were included as columns in the Query Definition, will not display in the query results.
The third level of security is at the column level (i.e. file elements and formulas).
The initial setting for a file element is dependent on the Security setting on the element in Data Dictionary Maintenance. The initial setting for formulas and file elements from files with no Data Dictionary setting is no security. Security can be set on an individual column in the Query Definition by selecting the Security button either in Column Options or in Query Formula Definition.
If security is set at this level and fails at run time, then the values of fields that did not pass security will not be used in formulas.
The Security Manager includes Full Access and View Only settings. In most cases, there is no difference between these settings as they apply to a query, as the common function of the query is to display records from a dataset and return a value associated with a selected record. However, there is one instance where these two settings do make a difference: when the query (or query list) is used to populate a Smart Grid. In that case, any files or columns set as View Only will result in the affected cells being locked.
Besides providing Query+ and Classic Query displays, the Query Subsystem can be used to supply data for AutoCharts, Smart Controls and the *QUERY* file interface. Any security applied to the Query Definition will affect the datasets supplied to these interfaces. If the top-level security set on a query (or query list) definition fails, then the Smart Controls will still be formatted, and files that are opened using *QUERY* will open successfully and have a valid IOList; however, the dataset that is returned will be null.
Defining a Query
Creating a Query List Definition
Creating a Smart Control (or Smart Chart) Definition