Roger,
This is a shameless plug but they are solutions to your problem.
If you have PowerTech's Network Security you can utilize its Generic
Exit point to perform a profile switch and release. One solution might
be something like this.
1. Set up Memorized Transaction rules in Network Security. The data's
format is up to you since you are defining what will be passed to the
Generic Exit point program. Part of setting up a Memorized Transaction
is the ability to provide a user profile that can be switched to.
2. Have your application call the Generic Exit point program. If it
returns an Allow then you continue processing. If it returns Disallow,
your application takes appropriate action.
3. When processing is done call the Generic Exit program again to
release the switch.
If you have auditing turned on the rule validation will show up on
Network Security's reports.
You can also embed PowerTech's Authority Broker product into your
application. Authority Broker will allow you to switch profiles and
report on commands run during the switch.
In either case your problem is solved and you have built-in audit
trails.
Gary Monnier | Senior Software Developer
19426 68th Ave. S
Kent, WA 98032
gary.monnier@xxxxxxxxxxxxx
www.powertech.com
-----Original Message-----
From: midrange-l-bounces+gary.monnier=powertech.com@xxxxxxxxxxxx
[
mailto:midrange-l-bounces+gary.monnier=powertech.com@xxxxxxxxxxxx] On
Behalf Of Mackie, Roger L. (Precision Press)
Sent: Tuesday, April 03, 2007 11:44 AM
To: Midrange Systems Technical Discussion
Subject: RE: Adopted authority and triggers
Unfortunately, no. The reason for using adopted authority for this
application was to exclude the user from the data except when using the
approved stored procedures. *USE authority would let them use MS Query
to access data we don't want them to see unless we got even more
complicated with exit points, etc.. We're using data queues for other
applications, so it's not as big of a stretch to add that piece, but I
was trying to keep it simpler.
Thanks anyway,
Roger Mackie
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[
mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Turnidge, Dave
Sent: Tuesday, April 03, 2007 12:33 PM
To: Midrange Systems Technical Discussion
Subject: RE: Adopted authority and triggers
Don't suppose there's any chance of letting users *USE the library? This
prevents them from creating anything, but (depending on the object level
authority) should let them do what is needed for processing...
midrange.com
