1 08/14/84  secure_mrds_db, smdb
 2 
 3 Syntax as a command:  smdb db_path {-control_args}
 4 
 5 
 6 Function:  This command provides the ability to turn on (or off) the
 7 attribute level security control features of MRDS.  This is done on a
 8 data base basis.  The secured state of a data base can also be
 9 displayed by this command.
10 
11 
12 Arguments:
13 db_path
14    is the relative or absolute pathname of the data base to be secured,
15    unsecured, or have its secured state displayed.  The data base
16    suffix need not be given.  The path must be to a version 4 data
17    base, not to a submodel.
18 
19 
20 Control arguments:
21 -display, -di
22    causes the current data base secured state to be displayed without
23    affecting that state.
24 -reset, -rs
25    causes the specified data base to be unsecured, regardless of its
26    current secured state.
27 -set
28    causes the specified data base to be secured, regardless of its
29    current secured state.  (Default)
30 
31 
32 Notes:  A data base that has been secured can be opened by a non-DBA,
33 only via a submodel residing in the "secure.submodels" directory
34 underneath the data base directory.  This allows turning on (or off)
35 attribute level security, which is implemented via submodel views,
36 using their access control modes (version 5 submodels).  Data bases
37 earlier than version 4 are not supported.
38 
39 This command requires the user to be a DBA.  Once the data base has
40 been secured, commands that normally operate against the model view
41 requires the user to be a DBA.  In addition, once the data base has
42 been secured, commands using a submodel view require non-DBAs to use
43 secured submodels.
44 
45 
46 See the documentation for create_mrds_db -secure, create_mrds_dsm
47 -install, mmi_$get_secured_state, mmi_$get_authorization, and Section
48 7, "Security" in the Multics Relational Data Store Reference Manual
49 (AW53).