SAS Administration from the Ground Up

Chapter 6: SAS 9.4 Metadata Security

Introduction

Authorization

What Does Authorization Mean?

Interface to Apply Permissions

Permissions in SAS

Color Coding

Best Practice: The Golden Rules for Metadata Security Model Design

Creating Custom Access Control Templates

Rule 1: If Applicable, Use Access Control Templates (ACT) and Avoid Using Access Control Entries (ACE) Whenever Possible

Rule 2: Only Add Groups to Access Control Templates (ACTs)

Rule 3: ACTs Only Grant Access to Explicit Groups, Never Deny

Rule 4: Where Necessary, Apply ACTs to Deny Access to PUBLIC/SASUSERS, in Combination with ACTs to Grant a Reduced set of Permissions to Explicit Groups

Rule 5: Always Apply the SAS Administrators ACT when PUBLIC and SASUSERS Are Denied Access ...