Safeguard Reference Manual (G06.24+, H06.03+ )

Event-Exit-Process Commands
Safeguard Reference Manual—520618-013
15-27
Processing of Authorization Requests
Timeout Policy for Authorization
If the event-exit process does not respond to a request within the configured time
interval, the SMON assumes that a problem has occurred and continues processing as
follows.
If the authorization request is from an undeniable user when a timeout occurs, a
response of YES is assumed, and the access attempt is allowed to proceed, subject to
a Safeguard access check as described in Processing of Authorization Requests on
page 15-26. Super-group members are considered undeniable users. An EMS
message is sent to indicate that an undeniable user has timed out, thereby prompting
the undeniable user to disable the malfunctioning event-exit process.
If the authorization request is from a deniable user when a timeout occurs, that user is
left waiting indefinitely for a response from the event-exit process. The requestor
process, including the entire thread initiating the authorization check, will hang.
Other Error Handling for Authorization
Other problems that cause timeout behavior are I/O errors, disabling of the event exit,
and invalid data received from the event-exit process.
I/O errors can occur when the event-exit process halts before responding to a request,
or when it is enabled but is down or restarting and the open is incomplete. In either of
these events, the request is resubmitted to the event-exit process once the open is
established. However, the timer is still running on these requests, and a timeout is
likely to occur. EMS messages will be sent to identify these errors.
NO Not consulted NO Not consulted
NORECORD YES YES Not consulted
NORECORD NO NO Not consulted
NORECORD NORECORD NORECORD YES or NO
Event exit disabled YES YES Not consulted
Event exit disabled NO NO Not consulted
Event exit disabled NORECORD NORECORD YES or NO
Event exit disabled Safeguard
disabled
NORECORD YES or NO
Event exit disabled Safeguard
disabled
NORECORD YES or NO
*
Table 15-11. Decision Table for Event Exit, Safeguard, and Guardian
Results (page 2 of 2)
Event Exit Ruling Safeguard
Ruling
Protection_Check
_Result
Guardian Security
Ruling
* If an object has a Safeguard protection record and the Safeguard subsystem is disabled, access rulings
for that object are as described for the STOP SAFEGUARD command in Section 16, Safeguard
Subsystem Commands.