Re: File protection basics

Hello, Dave,
What version of the IBM i OS is in use?  Newer versions offer more and even better protection choices.

IBM i 7.1 and above, provides the ability to use Db2i "FieldProcs" to secure individual columns in your chosen database tables (files), encrypting and decrypting the values as needed.  This can also be done "conditionally," based on user or group profile, etc.
IBM i 7.2 and above provides Db2i "Row and Column Access Controls."  With RCAC, you could even prevent users with *ALLOBJ authority from viewing or changing data within certain tables (files).
I hope this helps somewhat.
All the best,
Mark S. Waterbury

On Tuesday, September 1, 2020, 10:49:17 AM EDT, Dave <dfx1@xxxxxxxxxxxxxx> wrote:

Hi,

I've been given the task of rendering a few files containing banking data
"secure". I don't know much about this subject at all, but I've the feeling
that might be more than most in this company!

The requirement is that the files involved become the property of the owner
of the program that performs the updates and writes to the files. Nothing
is mentioned about mere consulting of banking data. Modifications via SQL
and DFU are to be prohibited. Only certain users will be able to use the
program that can modify the files.

I think I'm capable of putting that all into place without help, but I'm
sure there are many loopholes in this proposed solution to prevent fraud.
I'm wondering what a good strategy would be and how to implement it.

Any advice would be much appreciated.

Dave