Validation of RPCs

The RPC Broker security allows any RPC to run when it is properly registered to the VISTA client/server application. The Broker on the server along with the Kernel's Menu Manager determines which application a user is currently running. Menu Manager determines if a user is allowed to run this application or option by the following process:

  1. A remote procedure call is sent by a client application and is received by the RPC Broker on the server.

  2. The Broker verifies that the RPC is "registered" to the application that the user is currently running, prior to executing the remote procedure call (RPC).

    The application being run is designated by a "B"-type option in the OPTION file (#19). The application must specify the option and that option must be in a user's menu tree.

    For more information on registering an RPC to a package, see the topic entitled "RPC Security: How to Register An RPC" in the RPC Broker V. 1.1 Getting Started with the Broker Development Kit manual.

  3. Menu Manager checks if the RPC is registered for this package option. If not properly registered, Menu Manager will return a message explaining why the RPC is not allowed.

  4. The Broker on the server executes the RPC if it is registered, otherwise it is rejected.