space
Previous Page | Next Page

SAS Namespace Types

AccessControlTemplate


Subclass of AccessControl


Overview

The AccessControlTemplate (ACT) metadata type enables you to define a template of individual users, groups, and permissions that can be applied to multiple resources. This template is stored as an independent resource that can be associated with other resources. Use this metadata type when you want to confer the same set of authorizations on multiple resources. Because an ACT is independent of the resources which it controls, it is also easy to maintain when an update is needed. Any change that you make to the ACT will be enforced on all resources that reference the ACT.

An ACT should not be explicitly created or deleted. ACTs are managed programmatically using the SAS Open Metadata Interface ISecurityAdmin method class, which is documented in the SAS 9.2 Open Metadata Interface: Reference and Usage. The ISecurityAdmin class provides methods for defining and managing direct access controls as well as access control templates.

Security Inheritance and Enforcement Rules

The following is a list of associations which are used to determine if this object should inherit access controls from another object (inheritance) or if the association is allowed for the object (enforcement). For more information about inheritance and enforcement rules, see the SAS 9.2 Intelligence Platform: Security Administration Guide.

Attributes

Name Description Type Length
Use This is a field that can store a symbolic flag indicating a special use for this particular ACT. Note: A specific ACT may have only one special use. If an ACT needs to be used in more than one way, then a new ACT should be created for each additional Use value. The additional ACTs would then simply add the original ACT to their AccessControlItems   String 40  

Inherited Attributes
Name Id Desc MetadataCreated MetadataUpdated ChangeState  LockedBy  PublicType  UsageVersion 

Associations

= indicates the resident side of an association, or where the association is persisted for cross-repository associations. If no resident side is indicated, this association may not cross repository boundaries.

Name Cardinality Description Associated Types
AccessControlItems

Partner: AccessControlTemplates

0 to * The list of access controls that define this access control template.  AccessControl
AccessControlEntry
AccessControlTemplate

Inherited Associations
AccessControls/Objects , AccessControlTemplates/AccessControlItems , Changes/Objects , CustomAssociations/OwningObject , Documents/Objects , Extensions/OwningObject , ExternalIdentities/OwningObject , Groups/Members , Implementors/ImplementedObjects , Keywords/Objects , LocalizedAttributes/AssociatedLocalizedObject , Notes/Objects , Objects/AccessControls , PrimaryPropertyGroup/AssociatedObject , Prompts/PromptEnabledObject , Properties/AssociatedObject , PropertySets/OwningObject , ReferencedObjects/AssociatedObjects , ResponsibleParties/Objects , SourceTransformations/TransformationSources , SpecSourceTransformations/SourceSpecifications , SpecTargetTransformations/TargetSpecifications , TargetTransformations/TransformationTargets , Timestamps/Objects , Trees/Members , TSObjectNamespace/TSObjects , UsedByPrototypes/UsingPrototype , UsingPrototype/UsedByPrototypes , Variables/AssociatedObject 

Attribute Details

Use
     Type:  String 40  

This is a field that can store a symbolic flag indicating a special use for this particular ACT. Note: A specific ACT may have only one special use. If an ACT needs to be used in more than one way, then a new ACT should be created for each additional Use value. The additional ACTs would then simply add the original ACT to their AccessControlItems.

Association Details

AccessControlItems
     Cardinality:   0 to *
     Partner:   AccessControlTemplates

The list of access controls that define this access control template. 

Associated Types:
AccessControl   AccessControlEntry   AccessControlTemplate


space
Previous Page | Next Page | Top of Page