Database Service (DBS) Security

Security for the DBS is administered by the Access Control Service (ACS). As with other CygNet services, security is set on an application and event basis. The application name of the DBS is defined in the service configuration file using the keyword ACS_APPLICATION. The default is “DBS.” The security events are listed in the DBS Events table below.

The following tables provide details about DBS security settings. See also Security.

Service Application Name Main Security Event Component-Level Security Subject to Application Override

DBS (name defined in service configuration file)

ACCESS (name defined in service configuration file)

No

No

DBS Events

Event Event Description Authorization Tasks

ACCESS

Service content management

0-None

None

1-Read

View properties of service

2-Update

Inclusive

3-Add

Inclusive

4-Delete

Inclusive

5-Admin

Full permission for all service Events (except ODBC) regardless of the authorization for those Events

ODBC

Access service records from an ODBC-compliant application

0-None

None

1-Read

View records in the service

2-Update

Edit existing records

3-Add

Add records

4-Delete

Delete records

5-Admin

Inclusive

SVCINFO

Miscellaneous GenServe security management

Note: The SVCINFO event allows changes to log settings and use of the GlobalFunctions method SetGenserveInfo without requiring higher privileges on other actions. Other tasks are listed at right.

0-None

None

1-Read

Change queue translations

This event is used by DBS services to avoid full replication resyncs after failovers.

5-Admin

Permission level required to perform the following tasks:

  • Give ConfigFileManager remote access to service configuration files
  • Change log settings
  • Change audit levels
  • Perform on-demand backups
  • Change DBS and VHS disk cache minimum and maximum sizes
  • Request an activation check