A
metadata-bound library is a physical library that is tied to a corresponding
metadata object. Creating a metadata-bound library generates a new metadata object and binds the
physical library to that object.
Each metadata-bound library has information in its directory structure that points
to a specific metadata object (a
secured library object). Similarly, each physical table within a metadata-bound library has information
in its header that points to a specific metadata object (a
secured table object). These pointers create security bindings between the physical data and its corresponding
metadata objects. The bindings ensure that SAS universally enforces metadata-layer
permission requirements for the physical data—regardless of how a user requests access
from SAS.
Access from SAS to metadata-bound
data is provided only if all of the following conditions are met:
-
The requesting user can connect to the
metadata server in which the corresponding metadata objects are stored.
-
The requesting user’s
metadata identity has all required metadata-layer effective permissions for the requested action.
-
The host
identity with which the data is retrieved has all required host-layer access to the data.