Re: Trigger programme without a trigger.

[David Gibbs <david@xxxxxxxxxxxx>]

Joe Pluta wrote:
> This is a bit of a red herring, because if you can bypass authority then 
> you can bypass triggers: all it takes is an "accidental" RMVPFTRG.  

There's a big difference between 'accidental' and 'malicious'.

If someone has the authority to, and goes to the effort of, removing the 
trigger (which can't be done unless they can get exclusive access to the 
file) then their actions are clearly not accidental.

> Basing your architecture on the fact that you can't enforce your own 
> security rules seems to me to be a bad way to do things.

However, basing your architecture on the assumption that a single RPG 
application is going to be the ONLY possible way to update a file when 
this may not necessarily remain the case, is probably a bad way to do 
things also.

IMO, trigger programs are a fine way to enforce business rules in 
heterogeneous environments.

david