RE: Restricting access to data only from certain views

With RCAC you can restrict the access to the data in a file/table.
But keep in mind, this restriction then works, independent of which interface is used to access the data (SQL, native I/O, ODBC, UpdDta, Query/400, CPYF etc.
... and you have to make sure, that all other users (including user profiles such as QSECOFR or *ALLOBJ profiles) still have access to all data.

Mit freundlichen Grüßen / Best regards

Birgitta Hauser


"Shoot for the moon, even if you miss, you'll land among the stars." (Les Brown)
"If you think education is expensive, try ignorance." (Derek Bok)
"What is worse than training your staff and losing them? Not training them and keeping them!"
„Train people well enough so they can leave, treat them well enough so they don't want to.“ (Richard Branson)


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Mark Waterbury
Sent: Samstag, 25. September 2021 05:01
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Restricting access to data only from certain views

Rob,
This sounds like what RCAC - Db2i Row and Column Access Controls was designed for... see:
https://www.redbooks.ibm.com/abstracts/redp5110.html?Open


Mark S. Waterbury
On Friday, September 24, 2021, 02:21:45 PM EDT, Rob Berendt <rob@xxxxxxxxx> wrote:

Let's say you have a table called TABLEX in schema PF and a view called VIEWX in schema LF.
Can you set it up so that the person can only see the data in TABLEX by using the view VIEWX?
I do not want to use any exit points if I can avoid it. I prefer to secure the data and not play whack-a-mole trying to figure out ways to get to the data.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com