System Profiles

A system profile is a definition of attributes associated with user sessions when users sign on to a DC system. Attributes are keywords and their associated values.
idmscu19
A system profile is a definition of attributes associated with user sessions when users sign on to a DC system. Attributes are keywords and their associated values.
You create a system profile to set attributes for a user session that are specific to a system. The system profile is useful for defining attributes that are used by CA software.
For example, certain attribute keywords, such as DICTNAME and PRTDEST, have meaning to CA IDMS software components, and the values associated with these attribute keywords may be used by CA IDMS at runtime. Other attribute keywords can be site-defined, and any valid attribute can be referenced by a user-written program.
2
2
Associating A System Profile With A User
A system profile definition may be associated with a user in the GRANT SIGNON statement. Any number of system profiles may be defined, but only one system profile is associated with a user.
The GRANT/REVOKE SIGNON statements may be used to change the specification of the system profile associated with the user's signon privilege.
It is possible to define a default system profile to be executed when a user for whom no system profile has been associated signs on.
For more information about default system profiles, see Administrating Security for IDMS.
User Session Attributes
The attributes of a user session are determined by signon processing and by the ability of the user to change attributes dynamically with a DCUF SET PROFILE statement.
At signon, DC/UCF establishes session attributes from the following profiles:
  • A user profile, if one is associated with the user definition
  • A system profile, if one is associated with the user's signon authority to the DC/UCF system.
Overriding Session Attributes
If a user profile is associated with the user in the user catalog, the user profile and the system profile are merged in signon processing. If there is a matching attribute keyword, the value associated with the keyword in the system profile takes precedence.
If a profile attribute has been defined with OVERRIDE=YES, the user is allowed to change the attribute value by issuing a DCUF SET PROFILE statement, assuming the user has authority to issue the statement. If a profile attribute has been defined with OVERRIDE=NO, the user cannot change the attribute value with a DCUF SET PROFILE statement.
For more information, see DCUF SET PROFILE.
Attributes in Batch Mode
If the user is accessing the system in batch mode, a profile attribute (such as DICTNAME) is overridden by a corresponding SYSIDMS parameter, even if the profile attribute has been defined with OVERRIDE=NO.
Table of attributes defined by CA IDMS
The following table lists the attributes defined by CA IDMS:
Keyword
Definition
BREAK
Determines whether immediate-write messages are received by a user while the user is signed on to a DC/UCF system
CASE
Specifies the character set the logical terminal is to use on input:
UPPER—On input, the logical terminal translates all alphabetic characters to uppercase.
UPLOW—On input, the logical terminal performs no translation.
DBNAME
Identifies the name of a database for a user's session
DBNODE
Identifies the DC/UCF system that controls the database for a user's session
DICTNAME
Identifies the name of a dictionary for a user's session
DICTNODE
Identifies the DC/UCF system that controls the dictionary for a user's session
EXTIDENT
Identifies the current external user identity for a user's Session
LOADLIB
(z/OS only) Identifies the ddname of a load library for this DC/UCF system
LOADLIST
Identifies a load list for a user's session
MAPTYPE
Specifies the name of the alternative map table
PRIORITY
Specifies the dispatching priority for the named user
PRTCLASS
Identifies the print class for a user's session
PRTDEST
Identifies the printer destination for a user's session
SCHEMA
Identifies the name of the current schema for this SQL Session
TEST
Identifies the test version number for a user's session
TZ
Identifies the time zone used to format displayed time
Extident Considerations
An external identity represents the end user of an application that uses a generic internal user id to sign on to CA IDMS. The external identity is recorded in the BGIN transaction journal record to provide auditing of end user access to databases.
Setting the external identity
The external identity is normally set programmatically as follows:
  • A CA IDMS/DC program uses the IDMSIN01 callable service SETPROF function to set the external identity as a user session profile attribute.
  • A Java program running on a distributed platform uses CA IDMS Server to set the external identity.
When this attribute is set in the current user session profile, it is also set on all remote DC/UCF systems associated with the user session. The return code is set to the highest error encountered. A nonzero return code indicates that the external identity may not have been set on one or more DC/UCF systems. It is also set for any remote database connections subsequently created by the user session.
To ensure the validity of the auditing information, the external identity can be set only by the client, which is either a CA IDMS/DC or Java application. It cannot be changed by a procedure running on a remote system.
Retrieving the external identity
Any program running in the DC/UCF system can use the IDMSIN01 callable service GETPROF function to get the current external identity session profile attribute. An SQL application can also use the PROFILE scalar function to get the current value of the external identity profile attribute.