Micro Focus Visual COBOL 2.3 Update 1 for Eclipse (UNIX) > Deployment > Deploying to Enterprise Server > Enterprise Server Security > Securing an Enterprise Server Installation > Security Reference Information > Resource Classes used by Enterprise Server > Resource Classes for ESMAC and Operator Command Security

Resource Classes for ESMAC and Operator Command Security

Restriction: This topic applies only when the Enterprise Server feature is enabled.

The list below defines the name of each default resource class used in Enterprise Server for ESMAC and operator command security, its meaning, the type of resource entities it contains, and the minimum permission that a user requires on the entities.

OPERCMDS

Relation

Class for operator commands used by casstart/casstop/casfile/cassub/casout... commands

Entities

Entity	Description
JESALIAS	If the user has 'Update' access to this resource, they are able to update or delete entries from the Alias table. If the user only has 'Read' access to this resource, the Update and Delete options are not available. If the user has 'None' access to this resource, they cannot access the Alias table at all.

Access Level

None, Read, or Update

MFESMAC

Relation

MAC Class for controlling access to ESMAC Resources

Entities

Entity	Description
TABLE	If your user has "Update" access to this resource then they will have the ability to interact with the majority of ESMAC function. Primary items controlled by this setting are the appearance of the buttons for controlling the SEPS (Tracing, Stopping), Stopping the Server, Accessing the console.log, trace data, dump data. If a user has "None" then they will not be shown any buttons other than the Server Status Button and the Monitoring button in addition to the Chg User button which allows them to sign-on. The basic effect of no access to this resource is that they are treated in the same way as an unauthenticated user. If they have "Read" access they will be shown the options but will be unable to perform any updates. If they have "Update" access or greater than they have full control of these functions.
GRP	This resource controls access to the buttons under the Resources drop down when the By Group selection is utilized. If the user has "Update" access to this resource then they will be able to access all the buttons that appear under the Resources pulldown when the By Group selection is made.
URI, XAT, XLT	This controls the access a user has to the various resources when selected via the By Type or Active menus under the Resources pulldown. "None" indicates that they can do nothing with this resource type, "Read" indicates that they can see the current settings, and "Update" indicates that they can modify the entries of this type.
ENV	This controls whether a user has an access to view the environment variable settings of an enterprise server by enabling or disabling the Env. Vars. button or using a direct URL. To use this entity, create a new element (ENV*) in the LDAP schema in the CN=MFESMAC group below CN=Enterprise Server Resources. Configure the group or the user access rights using the microfocus-MFDS-Resource-ACE attribute - set `ACE=deny:SYSADM group:read` (disables the Env. Vars. button in ESMAC) or `ACE=allow:SYSADM group:read` (enables Env. Vars. in ESMAC).

Access Level

None, Read, Update