Password protection with SEPA

The SESAM/SQL utility SEPA allows you to use passwords to protect a CALL DML table against unauthorized access. The password catalog is in the same user space as the CALL DML table. Access via the SQL interface is subject to SQL access protection.

In a table that is already protected by passwords, you can use SEPA to add, change or delete passwords.

If the user space is password protected, the password for the file must be made known to the task by means of the SDF command ADD-PASSWORD before SEPA is called.

You back up the password catalog by backing up the user space: When recovering the space, you can use the log files created since the last backup to apply the modifications to the space up to the current status, but not the password catalog. Changes to the password catalog are not recorded in the log files. It is therefore advisable to create a SESAM backup copy of the relevant space after each change to the password catalog.

A CALL DML table defined with SQL or migrated from a V1 database without password protection can be accessed via the CALL interface by anyone, provided a SEPA run has not been executed.

A CALL DML table migrated from a protected V1 database is protected by the migrated password catalog.