HP System Dictionary/XL General Reference Manual Vol 1 (32256-90004)

5- 46
either directly or indirectly owns all other scopes you create in the dictionary. All structure definitions and
dictionary occurrences you create are owned by a scope. Each owner scope has unlimited access to and
authority over the items it owns. An owner scope can transfer any or all of its owned items to another
scope. It can allow other scopes to access the occurrences it owns by creating an association between
those scopes and specified occurrences in the dictionary.
Specific information on occurrence ownership is located further on in this chapter, under the heading
"Access Rights".
The Dictionary Administrator Scope
This special scope, generally referred to as the DA scope, has ultimate authority over and unlimited
access to the entire System Dictionary. This scope exists after you initialize System Dictionary. It is owned
by the core set, and you can never delete it. The DA scope has all of the scope rights listed on the next
page, which, in this scope, you can never delete or modify. The DA scope is the only scope that can change
the DA password and DA scope external name. It can also call any System Dictionary intrinsic.
NOTE The DA scope and its password are considered highly sensitive and privileged infor-
mation.
The DA scope may create other scopes (which it then owns ) and may assign them individual scope rights.
If they have the Secure scope right, those scopes may, in turn, create other scopes (which they own) and
may assign to them, any of their own scope rights. Although there is no limit to the number of nested
levels of scopes in the dictionary, the maximum number of scopes that System Dictionary allows is 128.
Scope Rights
• Scope rights are capabilities associated with a scope. Scope rights specify the dictionary components
that the scope is allowed to manipulate. They also specify the dictionary operations that a particular
scope is allowed to perform. The six scope rights are:
• Secure capability indicates that a scope has the ability to create and own other scopes, and retrieve in-
formation about security.
• Extend capability indicates that youhave the ability toextend and customizethedictionary by creating
and owning new entity types, relationship types, relationship classes, and attributes.
• Create capability indicates that a scope has the ability to create and own entities and relationships.
• Read capability indicates that a scope can read entities and relationships accessible to that scope. Note
that if a scope has create capability, read capability is automatically assigned.
• Domain capability indicates that you can create and own dictionary domains, and retrieve information
about domains.
• Version capability indicates that you can create or own versions and perform version control opera-
tions. Note that if a scope has domain capability, version capability is automatically assigned.
Scope Right Restrictions There are some restrictions on modifying scope rights. Generally, System
Dictionary does not allow any scope right to be removed from a scope if that scope right is currently in use.
For example:
• A scope cannot be modified to remove secure capability if that scope owns any scopes.
• A scope cannot be modified to remove extend capability if that scope owns any attributes, entity types,
relationship types, relationship classes, or type/attribute associations.
• A scope cannot be modified to remove create capability if that scope owns any entity or relationship oc-
currences.
• A scope cannot be modified to remove domain capability if that scope owns any domains.
• A scope cannot be modified to remove version capability if that scope owns any versions.