Think of it this way.  You have a traditional RPG program.  You loathe
selecting fields with logical files or SQL.  Now you read a file which
contains a field of which you are not authorized to - by the way it is this
field for every record.  Therefore every read will be an error.  The
workaround is to either create a view or logical file which omits these
secured fields, or avoid traditional RPG i/o and use SQL to
if superuser;
cursorstmt=Select keyfld, dtafld,secfld from myfile;
cursorstmt=Select keyfld, dtafld from myfile;
c/exec sql
c+ prepare curstmt from :cursorstmt
c/exec sql
c+ execute curstmt

plus the matching logic for the fetch statement.  Get the gist?

Rob Berendt
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
Benjamin Franklin

                    "Richard B Baird"
                    <rbaird@esourceconsu       To:
          >                 cc:
                    Sent by:                   Fax to:
                    midrange-l-admin@mid       Subject:     RE: Use of a 
trigger...? is this areasonable?

                    01/24/2002 02:49 PM
                    Please respond to

Am I crazy, or didn't I hear something about "field level security" being a
new feature on the 400 several years ago?   I've never used it, never seen
it used and I heard it had a fairly significant performance hit.

if true though, couldn't that be used for your ferpa problem?

ok, maybe i am crazy...


---original message---
This is an existing application with lots of existing programs and queries.
The records are (and should be) available for totaling, counts, reports,
internal use.  FERPA has to do with releasing private information to the
public.  Creating the new logicals is a solution of sorts but creates many
problems with day to day use of the data.

The issue isn't so much security as it is "appropriate use".  Some sort of
as-yet undefined business-rule process has to take place.  There are people
already working on solving the business rule problem but my task is to
implement the business rule once they've written the rules.  It appears to
me that I have to find some way to attach the business rules to the data
itself, not overlay a simplistic mask on the data.  A logical view solution
seems easy to implement but impossible to live with.

Thank you all for this discussion.  Its being very helpful to us here.

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email:
To subscribe, unsubscribe, or change list options,
or email:
Before posting, please take a moment to review the archives

As an Amazon Associate we earn from qualifying purchases.

This thread ...


Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2022 by and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.