RE: authority on physical vs. logical

If you are on 7.2, perhaps Row and Column Access Control (RCAC) is a better solution. You can read up on it here:

http://www-01.ibm.com/support/knowledgecenter/ssw_ibm_i_72/rzahf/rzahfrcactitle.htm


Brian May
IBM i Modernization Specialist
Profound Logic Software
http://www.profoundlogic.com
937-439-7925 Phone
877-224-7768 Toll Free



Modernization Made Easy!
www.profoundlogic.com
         


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Gqcy
Sent: Monday, October 06, 2014 10:06 AM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: authority on physical vs. logical

I hope that is not the case...
because I only want the user to access
about 5 fields from the physical...



On 10/6/2014 9:28 AM, paultherrien wrote:

I think you need to give read access to the physical.
If the user cannot have access to the physical data, then a view is
not going to give it to the user.

On October 6, 2014 at 10:22 AM Gqcy<gmufasa01@xxxxxxxxx> wrote:


I am attempting to do a read via SQL (SQLRPGLE)...
I must have something not correct...


On 10/6/2014 9:08 AM, Charles Wilt wrote:

That should allow you to read the data using SQL or RPG RLA...

But some operations such as CPYF require access to the PF.

What are you trying to do?

Charles

On Mon, Oct 6, 2014 at 9:44 AM, Gqcy<gmufasa01@xxxxxxxxx> wrote:

I am trying to lock down sensitive data.
I have given:
TESTUSER *EXCLUDE
authority to the physical,
and
TESTUSER *USE on the view I created...

I get a Not authorized to the physical...

what do I need to do to allow access to the view, but not have
access to the physical???

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please
take a moment to review the archives at
http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.

Paul Therrien
Andeco Software, LLC
paultherrien@xxxxxxxxxxxxxxxxxx

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.