× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. MIDRANGE-L
  3. October 2020

RE: [EXTERNAL] Re: Securing one particular field within a file

Thanks for your reply Raul
From what I've read, that's the conclusion I have also arrived at
Plus
I beleive there HAS to be a mask
Which is not what I want to do



Sent via the Samsung GALAXY S® 5, an AT&T 4G LTE smartphone


-------- Original message --------
From: Raul Alberto Jager Weiler <raul.jager@xxxxxxxxx>
Date: 10/24/20 10:14 (GMT-05:00)
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: [EXTERNAL] Re: Securing one particular field within a file

According to Hernando, the records blocked by RCAC can not be updated (also
no read)
The records "masked" will display only what the mask allows, but they can
be updated.
Copied the answer here, sorry it is in spanish.
_______________________________________________________________________________________
Hernando Bedoya <hbedoya@xxxxxxxxxx> Fri, Oct 23, 2020 at 12:23 PM
To: Raul Jager <raul.jager@xxxxxxxxxxxxxxxxx>
Hola Raul....

la mascara es solo en el momento de la presentacion....pero en el momento
de actualizar no hay problema.

Ahora...tu no puedes actualizar lo que no puedes ver.... en otras palabras
si solo puedes ver TUS CLIENTES....no puedes actualizar un cliente que no
es TU CLIENTE.




Regards,

Hernando Bedoya
Senior IT Specialist - Db2 for i Evangelist
IBM Systems - Lab Services
Phone: 1 (507) 253-1531
hbedoya@xxxxxxxxxx


On Thu, Oct 22, 2020 at 9:12 PM Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>
wrote:

Good thought, to look at these things - I took a quick look at the
redpaper, and it seems the records included in the result set for an
insert will not include anything that goes against the RCAC rules -
chapter 6, I think, covers these things.

There are hints in the redpaper that RCAC can raise issues - so it's
worth looking into that, ttoo.

Cheers
Vern

On 10/22/2020 6:20 PM, Raul Alberto Jager Weiler wrote:
Yes, I did look at RCAC, If I understand correctly, it will cause that
the
rows that meet the criteria will not show, or it can mask the value of a
column, so it will not be visible for the users that are not supposed to
see it.
But, I did not find any mention to limit the updates, maybe I missed
that:

On Thu, Oct 22, 2020 at 1:52 PM Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx

wrote:

Raul - Have you looked at RCAC? Row-column access control? It's fairly
new - 7.2 is when it was introduced - it covers access through all
interfaces, SQL, RLA, ODBC, JDBC, etc. It is based on users or roles,
and it lets you control access to rows, as well as masks for columns. I
don't know offhand if the table has to be unlocked, as for triggers -
there is a redbook with full explanation. In there it says that RCAC is
not the only thing to use in a solution for security, so one must
understand what happens.

Cheers
Vern

On 10/22/2020 8:21 AM, Raul Alberto Jager Weiler wrote:
Sorry, that is what the corrector made out of *view*. (I had sent the
message from my phone)

I think your best option is a trigger.
In the old days, you could define a logical file in DDS with fields
that
are read only, But I have not seen an equivalent in SQL (Is it not
there
or
did I miss it?).

On Wed, Oct 21, 2020 at 8:06 PM Alan Shore via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

Thanks for your reply Raul
What's a veine?


Sent via the Samsung GALAXY S® 5, an AT&T 4G LTE smartphone


-------- Original message --------
From: Raul Alberto Jager Weiler <raul.jager@xxxxxxxxx>
Date: 10/21/20 17:55 (GMT-05:00)
To: Midrange Systems Technical Discussion <
midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] Re: Securing one particular field within a file

A trigger Will do that job
Also you can create a viene.

El mié., 21 de oct. de 2020 14:58, Alan Shore via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> escribió:

Hi everyone
We are on V7r3
My question is:-
Is there a way to secure a field in a file so that no one can
update/change it?
I realize that there needs to be a way to actually update/change the
value- but that will need to require a password (or something), so
that
it
CAN be updated/changed

I tried a google search, but nothing of any relevance was displayed

As always - all responses gratefully accepted

Alan Shore
E-mail : ASHORE@xxxxxxxx<mailto:ASHORE@xxxxxxxx>
Phone [O] : (631) 200-5019
Phone [C] : (631) 880-8640
'If you're going through hell, keep going.'
Winston Churchill

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com

As an Amazon Associate we earn from qualifying purchases.

This thread ...
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.