ca.portal.admin

Re: Area/Record security.

Discussion created by ca.portal.admin on Jun 22, 2007
You cannot issue in a dbproc any DML command that will change currency.
However, issuing a WRITE JOURNAL does not modify the currency, and is
therefore allowed in a dbproc.

Hope this helps.
Laura

Pierce, Richard (RMV) wrote:
Laura,

As I said to Chris (and sent it to the list with a non-registered
email
address which thus got bounced) I thought no DML commands were
allowed
in database procedures. Can you actually do this type of thing from
within a db proc?

Dick

Richard Pierce
(617) 973-8911
richard.pierce@state.ma.us


-----Original Message-----
From: IDMS Public Discussion Forum [mailTo:IDMS-L@LISTSERV.IUASSN.COM]
On Behalf Of Laura Rochon
Sent: Friday June 22, 2007 10:59 AM
To: IDMS-L@LISTSERV.IUASSN.COM
Subject: Re: Area/Record security.


Jim,

Turning on journal retrieval just creates BGIN and ENDJ checkpoints on
the journal for retrieval rununits. There are no journal images for
record access. However, for update rununits, your Journal Reporter
is
absolutely great!

The most widely used solution for this type of request is really, as
Chris pointed out, using a dbproc tied to all access commands on a
record. The dbproc writes a journal record identifying the type of
access.

Laura Rochon
Ajilon Consulting


Jim Phillips wrote:
We can supply a program, at sensible cost, to provide a formatted
report of=3D
changes to the record using the journals. I suppose we could also
report o=3D
n retrieval access to it but turning on retrieval journaling just for
this =3D
is a bit tail-wagging-dog.=3D20
=3D20
=3D20




Date: Thu, 21 Jun 2007 22:23:39 -0400> From: pierra@SPRYNET.COM>
Subject:=3D
Area/Record security.> To: IDMS-L@LISTSERV.IUASSN.COM> > greetings
from th=3D
e perplexed.> > I've got a situation where we need to track access to
1 (an=3D
d only 1)> record/area (we're a 1 record to 1 area (mainly) shop.)> >
We ne=3D
ed to see all who read/modify/update/store or erase. Batch and
online.> > W=3D
e're a IDMS 16.0 SP1 (No DC and minimal UCF) / CICS shop with DMLO
(too> mu=3D
ch), OLQ, Culprit and a home-grown> data unloader.> > OLQ security is
turne=3D
d on, but Culprit security is not. The sensitive> information in the
given =3D
record is secured by> encryption and de-encryption is handled in a
""special=3D
"" schema/subschema> combination.> > Any ideas?> > Dick Pierce> Mass
Registr=3D
y of Motor Vehicles> 617-973-8911> > 3 million transactions a day and
we ju=3D
st keep growing.> > While I approve of this message, I'm not running
for an=3D
ything.
_________________________________________________________________
Connect to the next generation of MSN Messenger=3DA0

http://imagine-msn.com/messenger/launch80/default.aspx?locale=3D3Den-us&
s=
o
urc=3D
e=3D3Dwlmailtagline=3D


"
IDMS Public Discussion Forum
IDMS-L@LISTSERV.IUASSN.COM
SMTP
IDMS-L@LISTSERV.IUASSN.COM
IDMS-L@LISTSERV.IUASSN.COM
SMTP








Normal

Normal
Re: Area/Record security.
"You cannot issue in a dbproc any DML command that will change currency.
However, issuing a WRITE JOURNAL does not modify the currency, and is
therefore allowed in a dbproc.

Hope this helps.
Laura

Pierce, Richard (RMV) wrote:
Laura,

As I said to Chris (and sent it to the list with a non-registered email
address which thus got bounced) I thought no DML commands were allowed
in database procedures. Can you actually do this type of thing from
within a db proc?

Dick

Richard Pierce
(617) 973-8911
richard.pierce@state.ma.us


-----Original Message-----
From: IDMS Public Discussion Forum [mailTo:IDMS-L@LISTSERV.IUASSN.COM]
On Behalf Of Laura Rochon
Sent: Friday June 22, 2007 10:59 AM
To: IDMS-L@LISTSERV.IUASSN.COM
Subject: Re: Area/Record security.


Jim,

Turning on journal retrieval just creates BGIN and ENDJ checkpoints on
the journal for retrieval rununits. There are no journal images for
record access. However, for update rununits, your Journal Reporter is
absolutely great!

The most widely used solution for this type of request is really, as
Chris pointed out, using a dbproc tied to all access commands on a
record. The dbproc writes a journal record identifying the type of
access.

Laura Rochon
Ajilon Consulting


Jim Phillips wrote:
We can supply a program, at sensible cost, to provide a formatted
report of=3D
changes to the record using the journals. I suppose we could also
report o=3D
n retrieval access to it but turning on retrieval journaling just for
this =3D
is a bit tail-wagging-dog.=3D20
=3D20
=3D20




Date: Thu, 21 Jun 2007 22:23:39 -0400> From: pierra@SPRYNET.COM>
Subject:=3D
Area/Record security.> To: IDMS-L@LISTSERV.IUASSN.COM> > greetings
from th=3D
e perplexed.> > I've got a situation where we need to track access to
1 (an=3D
d only 1)> record/area (we're a 1 record to 1 area (mainly) shop.)> >
We ne=3D
ed to see all who read/modify/update/store or erase. Batch and
online.> > W=3D
e're a IDMS 16.0 SP1 (No DC and minimal UCF) / CICS shop with DMLO
(too> mu=3D
ch), OLQ, Culprit and a home-grown> data unloader.> > OLQ security is
turne=3D
d on, but Culprit security is not. The sensitive> information in the
given =3D
record is secured by> encryption and de-encryption is handled in a
""special=3D
"" schema/subschema> combination.> > Any ideas?> > Dick Pierce> Mass
Registr=3D
y of Motor Vehicles> 617-973-8911> > 3 million transactions a day and
we ju=3D
st keep growing.> > While I approve of this message, I'm not running
for an=3D
ything.
_________________________________________________________________
Connect to the next generation of MSN Messenger=3DA0

http://imagine-msn.com/messenger/launch80/default.aspx?locale=3D3Den-us&s=
o
urc=3D
e=3D3Dwlmailtagline=3D


"
IDMS Public Discussion Forum
IDMS-L@LISTSERV.IUASSN.COM
SMTP
IDMS-L@LISTSERV.IUASSN.COM
IDMS-L@LISTSERV.IUASSN.COM
SMTP








Normal

Normal
Re: Area/Record security.
"Laura,

As I said to Chris (and sent it to the list with a non-registered email
address which thus got bounced) I thought no DML commands were allowed
in database procedures. Can you actually do this type of thing from
within a db proc?

Dick

Richard Pierce
(617) 973-8911
richard.pierce@state.ma.us

Outcomes