Using the Enforce User Access option in Visual LANSA

Date:27 February 2006
Product/Release:Visual LANSA V11
Abstract:How to implement and use the Enforce User Access option
Submitted By:LANSA Technical Support

Overview:

LANSA V11 introduced the ability to control user security in a Visual LANSA Slave environment in a similar fashion used in the LANSA for iSeries development environment. To use this option, you must know

  • how to restrict/enforce a users access to LANSA
  • how to enable this restricted/enforced access for Visual LANSA
  • how to make this restricted/enforced access known to Visual LANSA

Description:

This example uses the following LANSA development environment:

  • iSeries Master repository V11 & EPC765
  • Windows Visual LANSA slave V11 & EPC765

Steps to Enforce User Access in VL:

Note: In this example, we will restrict a users ability to create fields in a Visual LANSA slave environment.

  1. Log into LANSA for iSeries as partition or system security officer.
     
  2. Take Housekeeping option “Review user access to LANSA System” and enter the user you wish to restrict access to.
     
  3. Enable Change mode (F21)
     
  4. Locate the following description “Create new field definitions” and blank out the Y (See figure 1)

    Figure 1. Blank out the Y for "Create new field definitions”
    Figure 1
     
  5. Take Housekeeping option “Create or change system partition definitions”. Select the desired partition to change.
     
  6. Enable Change mode (F21)
     
  7. Change option "Enforce User Access in VL" to YES (see figure 2)

    Figure 2. Change option "Enforce User Access in VL" to Yes
    Figure 2
     
  8. The User Access changes are now ready to be updated in the Visual LANSA Slave system
  9. In the Visual LANSA login screen, select the System Initialization option.
     
  10. Select “PC Users” and Partition Definition (Master) for initialization (see figure 3)

    Figure 3. Select “PC Users” and Partition Definition (Master) for initialization
    Figure 3
     
  11. Once the Initialization completes, log into Visual LANSA with the user that you have restricted Field create access for
     
  12. The menu option to create fields is not available (grayed out) (see figure 4)

    Figure 4. The menu option to create fields is not available
    Figure 4
     

Main Considerations:

  1. In LANSA iSeries Housekeeping option “Review user access to LANSA System” there are 2 levels of menu’s available.
    MAIN SYSTEM MENU 
    FIELD CONTROL MENU 
    Create new field definitions                Y 
    And
    FIELD CONTROL MENU 
    Create new field definitions                Y

    For a Visual LANSA system, changing the user access to the Main System menu’s “Work with” has no meaning. Any user access changes must be made to the Create/Delete options for the particular object you wish to restrict access to.
     
  2. For changes to be propagated to Visual LANSA, you must perform a system initialization of:
    - Enrolled PC Users – to promote the user security changes.
    - Partition Definitions (Master) - to promote the "Enforce User Access in VL" partition level changes.