Crypto Complete and Adopt Authority

FAQs and general information.
Support
Site Admin
Posts: 390
Joined: 03/12/04 02:12:52 PM
Location: Omaha, NE
Contact:

Crypto Complete and Adopt Authority

Postby Support » 07/28/17 03:59:51 PM

Question:
Why is data encrypted when I use Adopted Authority?




Answer:

When encrypting Database fields and using Field Procedures:

When you need to change the authority for a user to see the Full value of a field when they are normally only authorized to the masked or not authorized value you must change the Current User of the job.

We have made this easier by creating a new program CRRP015 that will change the Current User for you.

The Field Procedure programs are called in a secondary thread most of the time and adopt authority will not work.

We used to send out a sample program for users to use to change the current user. Now with version 3.51 we have built in a program to help with the process.

I have added the instructions below on how this process works

In version 3.51 there is a new program CRRP015 that will change the current user and notify the Field Procedure that the current user has changed.

The Program CRRP015 is compiled with User profile *OWNER.

The owner of the CRRP015 program must be changed to a user that has *USE authority to the newly swapped User Profile

The Parameters for the program are as follows:

Parameters for CRRP015 program:

Name Description Type Length In/Out Required
Process Plain Text Alpha 10 In Yes
UserID Current User Alpha 10 In Yes
MsgID Message ID Alpha 7 Out
MsgText Message Text Alpha 80 Out
Errors Errors occurred (Y-Yes) Alpha 1 Out



Example program call to swap the current user.

C Change the current user*

C CALL 'CRRP015' C PARM 'SWAP' PROCESS 10

C PARM 'RBYRD' UserId 10 C PARM MSGID 7

C PARM MSGTEXT 80 C PARM ERRORS 1 *

C Success-> No errors occurred. Check if External Index was found (not 0)*

C IF ERRORS <> 'Y'

C … Success logic … C ELSE

C Errors-> Display MSGID and MSGTEXT*

C … Error logic …

C ENDIF




Example program call to reset the current user back.

C Change the current user*

C CALL 'CRRP015'

C PARM 'RESET' PROCESS 10

C PARM ' ' UserId 10

C PARM MSGID 7

C PARM MSGTEXT 80

C PARM ERRORS 1 *

C Success-> No errors occurred. Check if External Index was found (not 0)*

C IF ERRORS <> 'Y'

C … Success logic …

C ELSE C Errors-> Display MSGID and MSGTEXT*

C … Error logic …

C ENDIF




Example program call to release the profile handles.

There is no need to release the handles until finished. There is a limit in a job of how many profile handles you can create.

The limit is around 20,000 but we have had one customer hit that value by creating and releasing the profile handles over and over.

C Change the current user*

C CALL 'CRRP015'

C PARM 'RELEASE' PROCESS 10

C PARM ' ' UserId 10

C PARM MSGID 7

C PARM MSGTEXT 80

C PARM ERRORS 1 *

C Success-> No errors occurred. Check if External Index was found (not 0)*

C IF ERRORS <> 'Y'

C … Success logic …

C ELSE C Errors-> Display MSGID and MSGTEXT*

C … Error logic …

C ENDIF

C

C Do not set on LR*

C RETURN;

Return to “Crypto Complete”

Who is online

Users browsing this forum: No registered users and 1 guest

cron