Re: Help with limiting libraries that show in ODBC connection using OpenLink and JTOPEN.

I, personally, would not attempt to put my own RCAC on any of those tables
and views in the system catalog. That might cause a real issue on a
RCLSTG or any number of other operations.

CRTLIB LIB(ROBXLIB)

strsql

CREATE TABLE ROBXLIB.MYTABLE (MYCOL CHAR (5 ) NOT NULL WITH DEFAULT)
Table MYTABLE in ROBXLIB created but was not journaled.
SELECT SYSTEM_TABLE_NAME, SYSTEM_TABLE_SCHEMA FROM qsys2.systables
WHERE SYSTEM_TABLE_SCHEMA = 'ROBXLIB'
Finds it

GRTOBJAUT OBJ(ROBXLIB) OBJTYPE(*LIB) USER(*PUBLIC) AUT(*EXCLUDE)

crtusrprf dummy

Sign on as DUMMY

dsplib robxlib
Not authorized to library ROBXLIB.

SELECT * FROM qsys2.sysschemas WHERE SYSTEM_SCHEMA_NAME = 'ROBXLIB'
finds it.

SELECT SYSTEM_TABLE_NAME, SYSTEM_TABLE_SCHEMA FROM qsys2.systables
WHERE SYSTEM_TABLE_SCHEMA = 'ROBXLIB'
finds it.

SELECT SYSTEM_COLUMN_NAME ,SYSTEM_TABLE_NAME, SYSTEM_TABLE_SCHEMA
FROM qsys2.syscolumns WHERE SYSTEM_TABLE_SCHEMA = 'ROBXLIB'
....+....1....+....2....+....3....+....4....+....5....+...
SYSTEM_COLUMN_NAME SYSTEM_TABLE_NAME SYSTEM_TABLE_SCHEMA
MYCOL MYTABLE ROBXLIB

So, yes, they could search all libraries for a column called PAYRATE. But,
if security is right they could not see the data in that column.

select * from robxlib.mytable
Row or object MYTABLE in ROBXLIB type *FILE in use.
Oops forgot to COMMIT that data. One sec...

select * from robxlib.mytable
Not authorized to object ROBXLIB in QSYS type *LIB.

If you want RCAC on these tables you'll have to submit a DCR. Or create a
COMMON requirement. Or buy a bunch of enterprise class servers and join
LUG and submit it there.

Rob Berendt