Re: [EXTERNAL] Re: Securing one particular field within a file

Good thought, to look at these things - I took a quick look at the redpaper, and it seems the records included in the result set for an insert will not include anything that goes against the RCAC rules - chapter 6, I think, covers these things.

There are hints in the redpaper that RCAC can raise issues - so it's worth looking into that, ttoo.

Cheers
Vern

On 10/22/2020 6:20 PM, Raul Alberto Jager Weiler wrote:

Yes, I did look at RCAC, If I understand correctly, it will cause that the
rows that meet the criteria will not show, or it can mask the value of a
column, so it will not be visible for the users that are not supposed to
see it.
But, I did not find any mention to limit the updates, maybe I missed that:

On Thu, Oct 22, 2020 at 1:52 PM Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>
wrote:

Raul - Have you looked at RCAC? Row-column access control? It's fairly
new - 7.2 is when it was introduced - it covers access through all
interfaces, SQL, RLA, ODBC, JDBC, etc. It is based on users or roles,
and it lets you control access to rows, as well as masks for columns. I
don't know offhand if the table has to be unlocked, as for triggers -
there is a redbook with full explanation. In there it says that RCAC is
not the only thing to use in a solution for security, so one must
understand what happens.

Cheers
Vern

On 10/22/2020 8:21 AM, Raul Alberto Jager Weiler wrote:

Sorry, that is what the corrector made out of *view*. (I had sent the
message from my phone)

I think your best option is a trigger.
In the old days, you could define a logical file in DDS with fields that
are read only, But I have not seen an equivalent in SQL (Is it not there

or

did I miss it?).

On Wed, Oct 21, 2020 at 8:06 PM Alan Shore via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

Thanks for your reply Raul
What's a veine?


Sent via the Samsung GALAXY S® 5, an AT&T 4G LTE smartphone


-------- Original message --------
From: Raul Alberto Jager Weiler <raul.jager@xxxxxxxxx>
Date: 10/21/20 17:55 (GMT-05:00)
To: Midrange Systems Technical Discussion <

midrange-l@xxxxxxxxxxxxxxxxxx>

Subject: [EXTERNAL] Re: Securing one particular field within a file

A trigger Will do that job
Also you can create a viene.

El mié., 21 de oct. de 2020 14:58, Alan Shore via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> escribió:

Hi everyone
We are on V7r3
My question is:-
Is there a way to secure a field in a file so that no one can
update/change it?
I realize that there needs to be a way to actually update/change the
value- but that will need to require a password (or something), so that

it

CAN be updated/changed

I tried a google search, but nothing of any relevance was displayed

As always - all responses gratefully accepted

Alan Shore
E-mail : ASHORE@xxxxxxxx<mailto:ASHORE@xxxxxxxx>
Phone [O] : (631) 200-5019
Phone [C] : (631) 880-8640
'If you're going through hell, keep going.'
Winston Churchill

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com