Re: Field level security

[Wayne McAlpine <wayne.mcalpine@xxxxxxxxxxxxxxxxx>]

Consider building separate queries for each group and giving the group 
members only *use authority to their authorized query.  Then revoke 
public access to the wrkqry and chgqry commands.  Call the query using 
RUNQRY with record select *yes.

Paul Nelson wrote:
> Thanks for all your suggestions. This gets even weirder. Now the client is
> saying she wants one query. If foreman A runs it, she only wants to him see
> the employees assigned to him. If foreman B runs it, the display should be
> limited to his crew.
>
> I have figured out how to do it, but this breadbox keeps getting bigger.
> :-))
>
> Paul Nelson
> Office 512-392-2577
> Cell 708-670-6978
> nelsonp@xxxxxxxxxxxxx
>
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Wilt, Charles
> Sent: Thursday, June 19, 2008 11:38 AM
> To: Midrange Systems Technical Discussion
> Subject: RE: Field level security
>
> DB2 for the i includes column level security also at v5r3+
>
> Neither DB2 for i or DB2 LUW allow for per-column restriction; the
> per-column restriction is limited
> to UPDATEs.
>
> HTH,
>
> Charles Wilt 
> --
> Software Engineer
> CINTAS Corporation - IT 92B
> 513.701.1307
>
> wiltc@xxxxxxxxxx
>
>
> > -----Original Message-----
> > From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
> > bounces@xxxxxxxxxxxx] On Behalf Of Glenn Gundermann
> > Sent: Thursday, June 19, 2008 10:47 AM
> > To: Midrange Systems Technical Discussion
> > Subject: Re: Field level security
> >
> > Paul,
> >
> > As far as I know, only DB2 for Linux/Unix/Windows supports column-level
> > security.
> >
> > For DB2 for IBM i, I think you have to create a view with just the columns
> > you want.
> >
> > Hope this helps.
> >
> > Glenn Gundermann
> > ggundermann@xxxxxx
> > Cell: 416-317-3144
> >
> > > List,
> > > Is there any way through standard OS means to obtain field level
> > security?
> > > For example, if I give Jane Doe the ability to create a query over the
> > > employee master file, is there a way to let her see everything except
> > the
> > > salary field?
> > >
> > > This is a V5R4 system. Does V6 have this feature?
> > >
> > > Paul Nelson
> > > Office 512-392-2577
> > > Cell 708-670-6978
> > > nelsonp@xxxxxxxxxxxxx
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> > list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.
>
>
>
> This e-mail transmission contains information that is intended to be
> confidential and privileged.  If you receive this e-mail and you are not a
> named addressee you are hereby notified that you are not authorized to read,
> print, retain, copy or disseminate this communication without the consent of
> the sender and that doing so is prohibited and may be unlawful.  Please
> reply to the message immediately by informing the sender that the message
> was misdirected.  After replying, please delete and otherwise erase it and
> any attachments from your computer system.  Your assistance in correcting
> this error is appreciated.