Good afternoon, IBM-MAIN We'd like to be able to prevent certain "confidential" fields in production files from being revealed to "unauthorized" users while still allowing access to the rest of the record. From the users prospective these files are read-only and are accessed through TSO, batch or CICS for testing or comparison purposes.
The total volume of such files is huge and changes daily, so cloning them and altering the sensitive fields is not an option. The only other option we can think of is to develop an in-house method of intercepting and altering records while they are being read, transparently to the application. Here's what we've researched so far: - In CICS this should be easily achievable through the file control exit. The exit would look up the dataset in a table and if found, apply a correspondent "rule". - In batch we would implement a subsystem that would intercept each [sequential] I/O and alter the record using the very same rules. What do we do in TSO? Generally, how do we intercept records of a dynamically allocated file? There is a system-wide dynalloc input validation exit, IEFDB401, and it might be able to add "SUBSYS=..." to the DYNALLOC requests, but this would severe overtax all other dynamic allocations in the shop. Appreciate all and any ideas, as crazy as they might sound -Victor- _ This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
