Command level security
In the previous chapters, we discussed GoldenGate's Command Interpreter (GGSCI) in detail, conveying many useful commands, some of which are information only whilst others change or add to the configuration. This could be deemed as a security risk, allowing users to misconfigure or even delete valid processes, potentially breaking your GoldenGate environment.
To avoid this risk, GoldenGate has a security feature that protects your environment at the command level. Here, users are restricted in the commands they can execute from GGSCI.
The CMDSEC file
To enable Command Level Security, we must first create a CMDSEC file in the GoldenGate home directory. This text file should be created by the user responsible for the central administration of GoldenGate. It contains the security rules and controls which users have access to certain GGSCI commands.
Open the file using a text editor and specify one rule per line in the following format:
<command name> <command object...
