Security Summary

DBA Level

SECURE DBA Command - Grant Authorization to Assign and Change Security

  1. If specified, must be assigned before any other security level.
  2. Can specify up to 10 Data Base Administrator (DBA) passwords.
  3. Access to all objects without entering a password, although cipher key must still be specified for encrypted objects.

PERMIT DBA Command - Identify User as Authorized DBA

    1. Data Base Library (DBL) must be declared first.
    2. Required whenever security is changed (unless the ALTER security privilege is set for DBL or object).

UNSECURE Command - Remove Security

    1. Must enter DBA passwords.

CIPHER Command - Encrypt Data

    1. Not applicable to DBA level, but DBA can assign encryption for any object.

DBL Level

SECURE DBL Command - Assign or Change Passwords for DBL

  1. Optionally set PRIVILEGE and ACCESS.

PERMIT Commands - Identify User as Authorized for DBL Access

PERMIT PASSWORD provides access to the DBL

PERMIT DBL provides access to encrypted DBL’s

UNSECURE Command - Remove Security

    1. Must enter DBA passwords or must enter DBL password (if ALTER security privilege is set for DBL).

CIPHER DBL Command - Encrypt DBL

  1. Entire DBL is encrypted.
  2. Key is required for access.
  3. Not readable outside of ACCENT R.