<div dir="ltr">DOWNLOAD does not invoke Envision security, but field-level and file-level security can be implemented by setting a configuration parameter that references an appropriate subroutine.<div><br></div><div>The configuration is set at the Unidata account level by creating a VOC entry called DOWNLOAD.CONFIG. One line in the VOC entry is used to implement security:</div><div> SECURITY.SUBROUTINE=nameofyourcatalogedsecuritysubroutine</div><div><br></div><div>DOWNLOAD calls this subroutine after the DOWNLOAD command is parsed. The following information is passed to the subroutine:</div><div>* actual command that was entered<br>* list of files being accessed<br>* list of dictionary items being accessed<br>* name of output directory (if output is being sent to a file)<br>* name of record being written (if output is being sent to a file)<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div>The subroutine needs to return a null string if security is okay or an error message if the user does not have adequate security clearance.</div><div><br></div><div>A sample security subroutine is provided with the DOWNLOAD source code. The sample subroutine header is:</div><div>SUBROUTINE DOWNLOAD.SECURITY.SUBR(A.RETURN.MSG,A.DOWNLOAD.COMMAND,AL.FILE.LIST,AL.ITEM.LIST,<a href="http://A.OUTPUT.FILE.NAME">A.OUTPUT.FILE.NAME</a>,<a href="http://A.OUTPUT.RECORD.NAME">A.OUTPUT.RECORD.NAME</a>)<br></div><div><br></div><div><br></div><div><br></div><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div><div dir="ltr"><table cellpadding="0" cellspacing="0" border="0" style="max-width:100%;background:none;border-collapse:collapse;border-spacing:0px;font-family:Roboto,sans-serif;color:rgb(82,82,82);font-size:14px;border:0px;margin:0px;padding:0px"><tbody><tr><td colspan="2" style="padding-bottom:5px;color:rgb(0,55,100);font-size:16px;font-family:Arial,Helvetica,sans-serif"><br>David Rotman, Ph.D.</td></tr><tr><td colspan="2" style="color:rgb(0,55,100);font-size:12px;font-family:Arial,Helvetica,sans-serif"><i>Chief Information Officer Emeritus (Retired)</i></td></tr><tr><td colspan="2" style="color:rgb(0,55,100);font-size:12px;font-family:Arial,Helvetica,sans-serif">Information Technology</td></tr><tr><td colspan="2" style="color:rgb(0,55,100);font-size:12px;font-family:Arial,Helvetica,sans-serif"><strong>Cedarville University</strong></td></tr><tr><td width="20" valign="top" style="vertical-align:top;width:20px;color:rgb(0,55,100);font-size:12px;font-family:Arial,Helvetica,sans-serif">o:</td><td valign="top" style="vertical-align:top;color:rgb(0,55,100);font-size:12px;font-family:Arial,Helvetica,sans-serif">937-766-7905</td></tr><tr></tr><tr><td colspan="2" style="color:rgb(0,55,100);font-size:12px;font-family:Arial,Helvetica,sans-serif"><a href="https://rotmand@cedarville.edu/" style="color:rgb(246,167,4)" target="_blank">rotmand@cedarville.edu</a></td></tr><tr></tr><tr><td colspan="2" style="padding-top:5px"></td></tr><tr><td colspan="2" style="padding-bottom:8px;padding-top:5px"><img src="https://www.cedarville.edu/~/media/Images/Email/1column-CU-tagline.png?ver=201705150925" style="max-width:100%;height:auto;vertical-align:middle;border:0px"></td></tr></tbody></table></div></div></div>
</div><div><br></div></div></div></div></div></div></div></div></div></div><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><br></div><div dir="ltr"><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div dir="ltr"><br></div><div dir="ltr"><div dir="ltr" style="font-size:small"><div><div><br></div></div></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jun 4, 2020 at 4:47 PM Glasser, David <<a href="mailto:glasserd@union.edu">glasserd@union.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>If we set up field security (say on the SSN field) using the QUERY.PRIVILEGE file, will that prevent users from accessing the field via the DOWNLOAD command?</div><div><br></div><div>-David<br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><font color="#000000"><span style="font-size:large;font-family:verdana,sans-serif">David Glasser</span><br></font><div><div><div><div><div><span style="font-family:verdana,sans-serif"><font color="#000000">Director of Enrollment and Operations<br></font></span></div><div><span style="font-family:verdana,sans-serif"><font color="#000000">Office of Admissions</font></span></div><span style="font-family:verdana,sans-serif"><font color="#000000">Union College<br></font></span></div><span style="font-family:verdana,sans-serif"><font color="#000000">807 Union Street<br></font></span></div><span style="font-family:verdana,sans-serif"><font color="#000000">Schenectady, NY 12308<br></font></span></div><span style="font-family:verdana,sans-serif"><font color="#000000">Phone: (518) 388-6561<br></font></span></div><div><span style="font-family:verdana,sans-serif"><font color="#000000">He/Him/His</font></span><span><font color="#888888"><span style="font-family:arial,helvetica,sans-serif"></span></font></span><br><span style="font-family:verdana,sans-serif"></span></div><div><span style="font-family:verdana,sans-serif"><font color="#000000"><br></font></span></div><div><font color="#000000" face="verdana, sans-serif"><i><div>Developing every student to lead with wisdom, empathy and courage, in ways large and small, now and across multiple tomorrows.</div></i></font></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
_______________________________________________<br>
download-list mailing list<br>
<a href="mailto:download-list@cedarville.edu" target="_blank">download-list@cedarville.edu</a><br>
<a href="http://mail.cedarville.edu/mailman/listinfo/download-list" rel="noreferrer" target="_blank">http://mail.cedarville.edu/mailman/listinfo/download-list</a></blockquote></div>