Re: Schemes for record level access control

[G-Mail via 4D_Tech]

Kirk:

Of course there are all sorts of ways this could be done. It all depends on the 
complexity.

We had to record by each user which records they were restricted from seeing. 
We also needed to permit / restrict by a group as well.
Therefore we could not put a ‘flag’ within the record. When a record was first 
found (i.e. Query) before being displayed we would have to check each record in 
the selection to see if there was a record in our ‘Restricted’ table for the 
currently signed in User. There could be different levels of restrictions as 
well.

For some kinds of restricted records we also needed to record what the query 
was that found the record(s). This was to see if they were hunting for that 
record, or it was by accident.

Therefore for each user there was an associated table that indicated which 
groups they were in. 
We used the record keys (Primary Key) to search for each record to see if the 
current user was restricted in regard to the record.

Of course this could be much easier if there are less possibilities.

Jody


> On 05/12/2017, at 1:42 PM, Kirk Brooks via 4D_Tech <4d_tech@lists.4d.com> 
> wrote:
> 
> Hi folks,
> I'd like to hear from some of you who have implemented systems that allow
> for record-level access control in a 4D database. This is the sort of thing
> where we want to prevent unauthorized users from seeing or inferring the
> 'restricted' records.
> 
> Theoretically it's pretty easy - include a field on relevant tables called
> 'restricted' or some such and the rules are you filter those records out if
> the user's permission doesn't allow them. Simple enough but, as we know,
> there be devils there. Maybe it's a whole different approach to the
> structure?
> 
> I want to hear about the details of what it took to make that work with
> respect to related records, queries on related records, sorting and so on.
> 
> -- 
> Kirk Brooks
> San Francisco, CA
> ===
> 
> *The only thing necessary for the triumph of evil is for good men to do
> nothing.*
> 
> *- Edmund Burke*
> **
> 4D Internet Users Group (4D iNUG)
> FAQ:  http://lists.4d.com/faqnug.html
> Archive:  http://lists.4d.com/archives.html
> Options: http://lists.4d.com/mailman/options/4d_tech
> Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
> **

**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: http://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Server Mirroring

[G-Mail via 4D_Tech]

Cannon:

We used mirroring extensively last with version 12 (before I ‘retired’). We 
used it at many of our sites since mirroring was first available (can’t 
remember which version that was).

Of course now we are on v16 so things will likely have changed. We will be 
implementing mirroring with that version once we get the project developed. 

With the earlier versions we could only keep the mirror working reliably if we 
had the log files written to the server’s local drives. If there is an 
interruption to the access to the drives where the logs are to be stored, the 
mirror would stop.

We had the log files being merged into the backup data file on the other server 
every 20 minutes. This way if there was a problem getting a log file sent to 
the backup server the main server’s logs didn’t stop being created. 

Just our experiences and how we did it.

Jody


> On 03/21/2017, at 2:44 PM, Cannon Smith via 4D_Tech <4d_tech@lists.4d.com> 
> wrote:
> 
> Hi Paul,
> 
> I’m just working out how to do this theoretically at the moment. But, no, 
> they won’t be on the same local network. I want them geographically diverse. 
> And I think I want an additional place (FTP site) that is away from both of 
> them to keep a copy of each log file in case the mirror can’t be reached for 
> awhile.
> 

**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: http://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Online Documentation with Right Click on command

[G-Mail via 4D_Tech]

Thanks Doug and Chip:

The download link for downloading 15R4 documentation, or 16 is not doing 
anything for me in any of my browsers.

I played around with the Web link and got rid of the ‘r’ that was after the 15 
and then the web documentation for the command comes up for v15.4. That will 
get me through most of my days. I will refer to the update documentation for R5 
that I have for those special commands. Once the developer working on all 
windows Client Server tests with v16 we will move to that version for our 
development.

Thanks guys!

Jody

**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: http://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Online Documentation with Right Click on command

[G-Mail via 4D_Tech]

I have got addicted to using the right click on a command to view that commands 
documentation. A few weeks ago this stopped working for me, and for the other 
programmer in another country.

I believe the settings are located in the 4D Preferences - Documentation 
Location.

The Web site setting is:  http://doc.4d.com/4dv15r/help/command/en/ 


My browser will always launch and look but come back with not found. Any ideas 
to help out this formerly retired 4Der? When I click on the ‘World’ icon beside 
the website setting it looks for:

http://doc.4d.com/4Dv15R5/4D/15-R5/4D-SVG-Component.100-3014973.en.html 


This comes up with the anticipated ‘Safari Can’t Open the Page notice.



While I am asking this a related question would be where would I download the 
HTML so I can have it stored locally? Then when my internet connection is down 
I can still have it. My internet goes down weekly. Sometimes for 10 minutes, 
sometimes for a few days. So this would be a good thing to have.

Thanks in advance for your ideas on this.
It seems the three years off I forgot the exact parameters, names of commands 
etc. I just know they should be there.

Jody
**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: http://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: Question about storing data outside of datafile

[G-Mail via 4D_Tech]

Chuck:

At each site we stored terabytes of files (PDFs, pictures, etc therefore 
hundreds of thousands of documents) outside the data file for 24 years at a few 
hundred sites. As you know medical so many regulations on security and logging 
of changes to the files.

1. We automatically created new folders each month and within the month each 
day.
2. The backup was adjusted each month to only backup the current months files 
and the rest of the year (usually empty).
3. All backups encrypted appropriately.
4. Multiple backups kept of all previous years of data.
5. If a document was modified, it would be moved to the current month’s folder.

Doing the above greatly reduced the size of the backup required each night.

Security

1. No on the network had access to the server where the files were stored. The 
backup device was attached directly to it. Only 4D had access to manipulate the 
files in anyway.

2. All access to the files was audited (even a view) both within our 
application, and the log files of the server they were stored on.

3. When the files were delivered to 4D Client for viewing they were encrypted 
and decrypted upon viewing. This provided security over the network of the 
documents.

This is how we set things up to keep the data file size down within 4D. This 
greatly speeded up the maintenance of the 4D Data file which got done each 
quarter - more or less depending on the site.

By creating new directories the speed of the storage Server was faster in 
delivering the documents. Also faster in working on that server directly and 
going into a folder.

If ever we needed to have programatic access to run through the files to 
manipulate for some reason we could easily keep track of where we where in the 
process.

Of course you may already have thought of all of this and there is some other 
reason this would not work for you.

Jody Bevan



> On 02/15/2017, at 11:59 AM, Charles Miller via 4D_Tech <4d_tech@lists.4d.com> 
> wrote:
> 
> On Wed, Feb 15, 2017 at 9:43 AM, Randy Engle via 4D_Tech <
> 4d_tech@lists.4d.com> wrote:
> 
>> However, we found that storing blobs in external file had detrimental
>> effects in certain cases.
>> If you've got 1000s and 1000s of blobs, these are all stored as individual
>> files on disk.
>> When copying these files (e.g. doing a manual backup), it takes vastly
>> longer than if the blobs are stored in the data file.
>> 
> 
> Did you let 4D decide where to place these files or did you control them.
> Could you not in either case add a folder for 4D to include in backups.
> 
> I have one customer where there are more than 500,000 pictures and drawings
> stored in data file. It would be great to store them outside, but for
> security reasons (outside access) and moving files between different
> locations make this impossible
> 
> Right now we have two copies of data file running on two different servers
> and data gets moved between when changes are made. We also have another 5
> servers as well as many single user versions.
> 
> Regards
> 
> Chuck
> 
**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: http://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**