Question & Answer
Question
How do I restrict users from accessing functions in the IBM i Access Client Solutions (ACS) client?
Answer
Access Client Solutions (ACS) provides the following methods to restrict (and view restrictions for) usage of various functions:
|
1. |
The first option for restricting Access Client Solutions features from being available is using the com.ibm.iaccess.ExcludeComps or com.ibm.iaccess.IncludeComps parameters within the AcsConfig.properties file. This can be done before or after Access Client Solutions has been installed.
See the GettingStarted.html file included with the product for details. com.ibm.iaccess.ExcludeComps tells Access Client Solutions to not include the listed features com.ibm.iaccess.IncludeComps tells Access Client Solutions to ONLY include the listed features
If Access Client Solutions has not been installed yet, the AcsConfig.propeties file will be located in the Access Client Solutions download package. The AcsConfig.properties file can be modified with any text file editor (NotePad, NotePad++). Refer to the section titled Component Customization and refer to the section comments for further details. Make the desired changes and save the file. These changes will now be included on each Access Client Solutions install you use with this install package.
If Access Client Solutions has already been installed, launch the Access Client Solutions main "Welcome" menu and go to Help -> About. There will be a path mentioning the location of the acsbundle.jar. This path will be the same path where the AcsConfig.properties file is located. Browse to this path and edit the AcsConfig.Properties file with any text file editor (NotePad, NotePad++). Refer to the section titled Component Customization and refer to the section comments for further details. Make the desired changes and then save the file. Relaunch Access Client Solutions to pick up the new changes. |
| 2. |
The second option for restricting Access Client Solutions features is to use the Restrictions tab. This tab is only available if Access Client Solutions was opened as a Windows Administrator. Using this feature utilizes the Windows Registry (Linux/Mac included) to restrict the desired Access Client Solutions features. This is the suggested method for Windows Administrators that want to eliminate the possibility of the end users being able to add Access Client Solutions features back in via the AcsConfig.Properties file. Open the ACS console (acslaunch_win-##.exe) as a Windows administrator. This list does not include database functions such as ODBC, OLE DB, and .NET because those are part of another product - "IBM i Access Client Solutions - Windows Application Package" You can export the .reg file from one Access Client Solutions PC to then import on other Access Client Solutions computers. |
| 3. |
Access Client Solutions features can also be restricted via the IBM i operating system utilizing Function Usage ID's via IBM Navigator for i. Expand "Security" (padlock icon), select Function Usage.
The Function Usage ID's for Access Client Solutions first need to be Registered. From the Function Usage feature, select the Actions button at the top and select Register/Unregister Applications. Confirm IBM i Access Client Solutions (ACS) has been added to the Registered applications side. Once registered the IBM i Access Client Solutions related Function ID's will be listed as available to be managed with naming scheme of QIBM_XE1_xxxxxxxx. Further information on Function Usage can be found here: IBM Navigator for i - Function Usage IDs Function Usage settings are also available using the WRKFCNUSG command. |
| 4. |
IBM i Access Client Solutions (ACS) supports the same WRKFCNUSG settings supported by IBM i Access for Windows (end of life was 2019). System i Navigator was the component (in Access for Windows) where Run SQL Scripts was previously supported. The following WRKFCNUSG settings are still used to control access to the Database features in ACS:
QIBM_XD1_OPNAV_DBLIBS
QIBM_XE1_OPNAV_DBSQLPM
QIBM_XE1_OPNAV_DBSQLPCS
QIBM_XE1_OPNAV_DBXACT
Disabling all of those will also disable Run SQL Scripts in ACS. Schemas and SQL Performance Center will also be disabled.
|
Related Information
Was this topic helpful?
Document Information
Modified date:
05 September 2025
UID
nas8N1020170