Security Overview

The Robot Save security system allows you to secure menu options and each backup class and backup set. Robot Save’s menu option security is easy to understand. Authorization to Use a menu option allows you to view all records and to perform the menu option, unless it is a setup function.

To display the Secured Objects panel, select option 14 from the System Setup Menu.

Backup Class Security

You can specify backup class security for all backup classes or just for an individual class. The authorities valid for all backup classes and the functions you are allowed to perform are:

Use authority:

• Run any backup set unless it is excluded by an individual class or set record.

• View information on the classes or sets.

• Run a backup set by executing the command RBSSave, scheduling it in Robot Schedule, or selecting the proper option on the Backup Operations Menu.

• Add or delete tape volumes using the Backup Set Rotations panel.

  Note: You cannot change any backup class or set information.

Change, Add, or Delete authorities:

• Add or delete backup classes and sets.

• Change any information on backup classes or sets.

Individual Backup Class Security

If you are granted authority to specified backup classes, each authority allows the following:

Use authority:

• Run any backup set within the specific class, unless excluded by an individual set record.

• View information on the class or its sets.

• Add or delete tape volumes for the backup set’s rotations.

Change authority:

• Add or delete sets within the class.

• Change any information on the backup class.

  Note: You cannot change any backup class or set information.

Backup Set Security

You can have the same security on backup sets or have security on each individual set. Before you set up security on the sets, restrict security on the backup class. A user must have Use rights to a class to have any rights for the sets. If you have authority for all backup sets, you are allowed to do the following:

Use authority:

• Run any backup set unless excluded by an individual class or set record.

• View information on the sets.

• Add or delete tape volumes on the backup set rotations.

  Note: You cannot add or delete any backup classes.

Change, Add, Delete authorities:

• Add or delete backup sets.

• Change any information on backup sets.

  Note: You cannot change any backup set information.

Individual Backup Set Security

If you are granted authority to a specified backup set, you are allowed to:

Use authority:

• Run the specified backup set. View information on the set.

• Add or delete tape volumes on the backup set’s rotations.

  Note: You cannot run any other sets or change any backup set information.

Change authority:

• Change any information on the backup set.

  Note: You cannot add or delete any backup set.

Restricting Initialization of Tape Volumes

You can ensure that all tape volumes created on your system are controlled by Robot Save. Just revoke authority to the IBM command INZTAP for all or most of your users. Robot Save’s initialize program is owned by a Security Officer so it always has the authority to initialize tapes. After Robot Save initializes the tape, it adds the volume to the tape management system where you have control.

Putting IBM i Security on the Robot Save Security System

Although all of the security information used by Robot Save is encrypted in the database files, you may want to restrict Change rights to the security program and files. Do not restrict Use rights or no one can use Robot Save.

You should revoke authority to add, change, or delete on the following objects:

• The program RBS810

• The files RBSQO, RBSQR, RBSQU