×
The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.
Did you know you can also look at these environment variables?
values sysibm.client_host;
values sysibm.client_ipaddr;
values sysibm.client_port;
values qsys2.job_name;
https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_73/db2/rbafzgvars.htm
So, if you're doing RCAC (available at 7.2 and above) you can build a user
defined function which says this person can only access these rows if they
are not remote.
Create permission NoVpn ON Employee_Table
for rows where AmILocal(sysibm.client_ipaddr)='1'
ENFORCED FOR ALL ACCESS
ENABLE;
There's more to this
see also:
ALTER TABLE ...
ACTIVATE ROW ACCESS CONTROL;
and
CHGFCNUSG FCNID(QIBM_DB_SECADM) USER(MIMIXOWN) USAGE(*ALLOWED)
on both source and target (and must be at current version of Mimix! Only
took them a few years but they finally support it.)
Cool thing is NO code change!
Rob Berendt
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact
[javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
