[Download-List] Download & Field Security

[Rotman, David]

DOWNLOAD does not invoke Envision security, but field-level and file-level
security can be implemented by setting a configuration parameter that
references an appropriate subroutine.

The configuration is set at the Unidata account level by creating a VOC
entry called DOWNLOAD.CONFIG. One line in the VOC entry is used to
implement security:
  SECURITY.SUBROUTINE=nameofyourcatalogedsecuritysubroutine

DOWNLOAD calls this subroutine after the DOWNLOAD command is parsed.  The
following information is passed to the subroutine:
*    actual command that was entered
*    list of files being accessed
*    list of dictionary items being accessed
*    name of output directory (if output is being sent to a file)
*    name of record being written (if output is being sent to a file)
The subroutine needs to return a null string if security is okay or an
error message if the user does not have adequate security clearance.

A sample security subroutine is provided with the DOWNLOAD source code.
The sample subroutine header is:
SUBROUTINE
DOWNLOAD.SECURITY.SUBR(A.RETURN.MSG,A.DOWNLOAD.COMMAND,AL.FILE.LIST,AL.ITEM.LIST,
A.OUTPUT.FILE.NAME,A.OUTPUT.RECORD.NAME)




David Rotman, Ph.D.
*Chief Information Officer Emeritus (Retired)*
Information Technology
*Cedarville University*
o: 937-766-7905
rotmand at cedarville.edu







On Thu, Jun 4, 2020 at 4:47 PM Glasser, David <glasserd at union.edu> wrote:

> Hi,
>
> If we set up field security (say on the SSN field) using
> the QUERY.PRIVILEGE file, will that prevent users from accessing the field
> via the DOWNLOAD command?
>
> -David
>
> --
> David Glasser
> Director of Enrollment and Operations
> Office of Admissions
> Union College
> 807 Union Street
> Schenectady, NY 12308
> Phone: (518) 388-6561
> He/Him/His
>
> *Developing every student to lead with wisdom, empathy and courage, in
> ways large and small, now and across multiple tomorrows.*
> _______________________________________________
> download-list mailing list
> download-list at cedarville.edu
> http://mail.cedarville.edu/mailman/listinfo/download-list
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.cedarville.edu/pipermail/download-list/attachments/20200608/53b46ecb/attachment.html>