How to secure Appraisal Data

The requierment of the HR department is to conceal the data in such a way that even the system administartor can not view or extract the data for appraisals from the system. The issue is that sys admin will have the access to user logins and the responsibilities attached to them. He maybe able to extraxct the data directly from the database or attach the HR responsibility to a login and can hence view the Appraisal data.
2 levels of security are required:
1) At Application level
2) At database level- to prevent direct querying of data.
Can you please help in achieving these 2 levels of security?

This is a common problem with all parts of the system. There really isn't a way of preventing the system administrator form seening any data if they give themselves the right responsibilities.
Appraisal data should only be seen by the participants in the approasal process. So there is already security there. The system administrator would have to actually log in as one of those participants to see anything. But, a DBA could look at the tables....
All I can suggest is that you put in place some monitoring of who accesses what and report on anomalies.
Regards
Tim

Similar Messages

How to securely store data?

hi all,
i'm writing a little app that stores their settings into a text file, in order to read them the next time ;
is there a way to "securely" store data? i wonder if i could store it into another file type, in order to deny anyone to read stored data. now, with text file is too simple!!!
i already use db, but this kind of data (my program's settings) doesn't need to be stored into a db
thanx
sandro

Well, you could encrypt the data when you write it, and decrypt it when you read it back.

Taking Mac In For Service - How to Secure My Data

I need to take my G5 in for service today. I'm concerned about the technicians having access to sensitive data on the system. Besides backing everything from the documents folder off to a firewire drive that I'll keep at home, what steps would:
a) protect passwords, account numbers, etc.
b) still allow the repair shop the access they need to run the system and troubleshoot.
c) prevent someone from installing a keylogger or similar security threat which I would not be able to detect when I get the machine back.
Related questions:
1) If I backup and then delete the system.keychain before giving them the system, will the mac generate a new keychain which they can use during the repair; and will I be able to replace it when I get the machine back?
2) If there are multiple user accounts on the machine, are there multiple keychains, and if so where are they?
Thanks much!

Király's post describes exactly what I do. I clone the drive to a spare, and then do an erase-and-install of generic OS X with none of my personal files, before sending the machine in. When the machine comes back, I clone my entire drive back to the Mac. I do this because:
1. I don't want to lose any data, so I back it all up.
2. I do not want others logging into my account or having access to my data, so I take it all off the drive.
3. Even if I had no confidential info, I would not want people screwing with my personally tuned configuration or installing or accidentally deleting things.
By cloning out, wiping, and cloning back, I ensure that the drive contents after it returns from service are 100% exactly what I had before I sent it out, no matter what the techs did.

OPM : How to add appraisal data maintained in offline

In Oracle Performance Management, do we have provision for the PMP admin to add the appraisal details which are done for certain group of Employee in offline. DO we have any mass update of appraisal for certain employee group.
In Performance Management, can we have Appraiser other than employee supervisor during creation of the PMP plan is there any option to provide eligible criteria for selecting the Main Appraiser apart from Supervisor.
Thanks
Siva

Hi Siva,
I think there is no utility to create appraisals and update details from offline data for PMP.
Regards,
Vinayaka
Edited by: Vinayaka Prabhu on May 9, 2012 4:04 PM

My iPhone 5 has broken and is being replaced with a new iPhone tomorrow. However, My carrier (orange) will b picking up my broken iPhone and I am unsure how to secure the content and icloud data on the broken phone. Is there a way to display the data?

My iPhone 5 has broken and is being replaced with a new iPhone tomorrow. However, My carrier (orange) will b picking up my broken iPhone and I am unsure how to secure the content and icloud data on the broken phone. Is there a way to disable the data held on it and ensure that if it is fixed, nobody can use/see my data and access my account?

Hi Gazpan,
Thanks for visiting Apple Support Communities.
I recommend using the steps in this article to back up your iPhone if possible:
iOS: Back up and restore your iOS device with iCloud or iTunes
http://support.apple.com/kb/ht1766
You may also find this advice helpful for your situation:
What to do before selling or giving away your iPhone, iPad, or iPod touch
http://support.apple.com/kb/ht5661
If you no longer have your iOS device
If you're using iCloud and Find My iPhone on the device, you can erase the device remotely and remove it from your account by signing in to icloud.com/find, selecting the device, and clicking Erase. When the device has been erased, click Remove from Account.
If you're unable to complete either of the above steps, you should change your Apple ID password. Changing your password won't remove any personal information that is cached on the device, but it will make sure that the new owner can't delete your information from iCloud.
Cheers,
Jeremy

How to store data in HRHAP tables(Appraisal data)?

Hi All,
I want to store some ratings information in HRHAP tables. But dont' know how to store the data.
For each and every pernr, we can have more than one appraisal id's ( which are year specific I think).
So, in order to store the current year rating, i will get it from the custom transaction and want to store the same in HRHAP table.
But how to generate the appraisal Id? Is there any way to generate or get that for the current year?
Please help me out in this.
Thanks in advance.
Thanks,
RSS.

Hi,
I think you have to use 'HRHAP_DOCUMENT*' Functions modules to update HRHAP table.
Regards,
Shrinivas

How to secure data transmission from Essbase Excel add-in to Essbase Server

I have a requirement to secure the data transmission (encrypt) the data transmission from the Essbase excel add in on the client machine to the Essbase server. I have confirmed with Oracle support that the excel add-in and the API only transmit the data in binary from with no encryption.
I wanted to see if anyone has implemented this before?
Thanks,
Mike

Technical support gave you the correct answer, it is
not supported. You might check with Tim Tow
http://www.appliedolap.com to see if either the
Dodeca or ActiveOlap products support encryption.Glenn is correct in that Oracle doesn't support it. More specifically, the Essbase server itself does not support it.
The other products mentioned in this thread, Smartview, Spreadsheet Services, Dodeca and ActiveOLAP, all can talk to the middle tier via https and are thus encrypted through that portion of the transaction. However, the communication from the middle tier, Analytic Provider Services in the case of System 9, talks to Essbase via TCP/IP unencrypted. If your middle tier/Essbase server connections are not 'sniffable', then essentially they are secured (albeit not encrypted).
Tim Tow
Applied OLAP, Inc.

How to secure e-mailed data file

Is there a way when a user clicks on Submit via E-Mail a completed form that the data file that is being e-mailed to me can be encrypted....or in the alternative is there a way to set a default password to secure the data file which I would then have to use to open the data file?
I don't want users to have to purchase Digital IDs, etc. to secure the data file that's being e-mailed to me--I'm looking at a simpler solution for the end user.
Thanks,
Steve

When a PDF form, or an HTML (web page) form is submitted, it is sent
to a web server. On the server, a web programmer has made a script to
deal with the received information: store it, e-mail it, throw it
away...
Submitting to an http server isn't secure, but a secure server running
https is secure. Of course, the server must not e-mail what it
receives, but should have a protected script for access. A security
expert should be involved to make sure the interests of the end user
and legal privacy requirements are properly observed.
Aandi Inston

How can I modify data from a Transparent Table without ABAP code.

Hi,All
How can I modify data from a Transparent Table (like TCURR), and important thing is I want do all that with no ABAP code here. It is like that we always do that in a Oracle database use TOAD or PLSQL third party tools, with no script code here.
I had fond that there is a way can do that:
1, type 'se11',and Display Database table 'TCURR', click Contents, then click Execute to display all data
2, type '/h' and let debugging on
3, select one of this data then click 'Display',enter in debugging system.
4, then make a breakpoint in the code. But... display a dialog let I type a 'ABAP Cmnds', I want to know what can be type in for that?
and, My system is ECC6.
thank you all
Edited by: xuehui li on Aug 20, 2008 6:30 PM

Hello,
Your approach (with Vijay's suggestion) MAY work. However, depending on how tight security is at the company that you are working at you may or may not be able to acutaly change the value of the SHOW field to EDIT. This will be especially true if you are working in a Production environment. Vijay's other comment is true as well. This is not a recommended approach to change data (especially data with a financial impact like TCURR) in a production environment. The auditors will not be impressed.
Explore the option of a maintenace view or look at tcode TBDM to upload a file which includes daily rates from providers like Reuters or try tcode s_bce_68000174 which is a maintenance view on TCURR.
Regards
Greg Kern

Step- by- Step on How to Load Excel data into Crystal Reports?

Hi Friends,
Can anyone send me a Step- by- Step on How to Load Excel data into Crystal Reports? Pls help me. Thanks in Advance.
Vijay

It's also important to 'prep' the excel file prior to connecting to it.
Give the data tab a meaningful name
Make sure the column headers are unique and that every column has a header
Delete any blank tabs
If you have trouble with Excel changing the data type of a field (say, a social security number you want to be a string value rather than a number so you don't lose leading zero) an alternative would be to save the spreadsheet file as a CSV, create a schema.ini to specify the data types for each column (example below) and use the same steps to connect except instead of choosing Excel 8.0, scroll to the bottom and choose Text. You have to make sure the CSV file is in the same folder as the schema.ini file that defines the columns.
Schema.ini example:
200912PUSD.csv
ColNameHeader=True
Format=CSVDelimited
MaxScanRows=25
CharacterSet=OEM
Col1=SSN Char Width 9
Col2=LAST_NM Char Width 25
Col3=FIRST_NM Char Width 25
Col4=DOB Date
Col5=STDNT_ID Char Width 10
Col6=SORTKEY Char Width 10
Col7=SCHOOL_NM Char Width 30
Col8=OTHER_ID Integer
Col9=GRADE Char Width 2
The filename in the first line needs to have the [] brackets around it, but I couldn't get it to display in this forum correctly.
Edited by: Eric Petersen on Jan 27, 2010 9:40 AM

How to secure connection in sql server 2008? my main problem is which certificate should i add in mmc

i'm recently working on hardening of sql server 2008. now i face with a problem. my problem is how to secure connection in sql server 2008? my main problem is which certificate should i add in mmc? what are these certificates about?and guide
me in choosing the appropriate certificate.
and how should i know that the connection in sql server is secured?
plz guide me from the beginning cause i'm rookie in this subject.
thanks in advance.

Hi sqlfan,
Question 1: my problem is how to secure connection in sql server 2008?
Microsoft SQL Server can use Secure Sockets Layer (SSL) to encrypt data that is transmitted across a network between an instance of SQL Server and a client application. For more information about Encrypting Connections to SQL Server, please refer to the following
article:
http://technet.microsoft.com/en-us/library/ms189067(v=sql.105).aspx
Question 2: my main problem is which certificate should i add in mmc? what are these certificates about?and guide me in choosing the appropriate certificate.
To install a certificate in the Windows certificate store of the server computer, you will need to purchase/provision a certificate from a certificate authority first. So please go to a certificate authority to choose the appropriate certificate.
For SQL Server to load a SSL certificate, the certificate must meet the following conditions:
The certificate must be in either the local computer certificate store or the current user certificate store.
The current system time must be after the Valid from property of the certificate and before the Valid to property of the certificate.
The certificate must be meant for server authentication. This requires the Enhanced Key Usage property of the certificate to specify Server Authentication (1.3.6.1.5.5.7.3.1).
The certificate must be created by using the KeySpec option of AT_KEYEXCHANGE. Usually, the certificate's key usage property (KEY_USAGE) will also include key encipherment (CERT_KEY_ENCIPHERMENT_KEY_USAGE).
The Subject property of the certificate must indicate that the common name (CN) is the same as the host name or fully qualified domain name (FQDN) of the server computer. If SQL Server is running on a failover cluster, the common name must match the host
name or FQDN of the virtual server and the certificates must be provisioned on all nodes in the failover cluster.
Question 3: how should i know that the connection in sql server is secured?
If the certificate is configured to be used, and the value of the ForceEncryption option is set to Yes, all data transmitted across a network between SQL Server and the client application will be encrypted using the certificate. For more detail about this,
please refer to Configuring SSL for SQL Server in the following article:
http://technet.microsoft.com/en-us/library/ms189067(v=sql.105).aspx
If you have any question, please feel free to let me know.
Regards,
Donghui Li

How to load excel data into oracle table

How do i load data from an excel file with several worksheets into an oracle table?
using Oracle 10g
Excel
sample data of excel
Name eric Name mary
AccountNo 123 AccountNo 321
amount1 5.0 Amount1 1.0
amount2 5.5 Amount2 2.0
amount3 6.0 Amount3 3.0
Total 16.5 Total 6.0
Name larry Name beth
AccountNo 123 AccountNo 321
amount1 5.0 Amount1 1.0
amount2 5.5 Amount2 2.0
amount3 6.0 Amount3 3.0
Total 16.5 Total 6.0
Note: Assume data are aligned into columns like a real excel workbook

I have some used something like this.
don't ask any details as I am not a xl person, but i think its pretty straight forword.
hope its helpful for you or someone else
Dim i As Integer
Dim conn As New ADODB.Connection
Dim strInsert As String
Dim strExecInsert As String
conn.ConnectionString = "Provider=MSDAORA.1;User ID=scott;password=tiger;Data Source=orcl.world;Persist Security Info=False"
conn.Open
strInsert = "insert into xlsc ( emp, dept, doj," & _
"dol, dob, Ce ,ED, v_date ) values("
'this is to insert first 2347 rows from xl to orcl
While i < 2348
strExecInsert = strInsert & "'" & _
Trim(Cells(i, 1).Value) & "','" & _
Trim(Cells(i, 2).Value) & "','" & _
Trim(Cells(i, 3).Value) & "','" & _
Trim(Cells(i, 4).Value) & "','" & _
Trim(Cells(i, 5).Value) & "','" & _
Trim(Cells(i, 6).Value) & "','" & _
Trim(Cells(i, 7).Value) & "','" & _
Trim(Cells(i, 8).Value) & "' )"
'MsgBox strExecInsert
If Cells(i, 1).Value <> "" Then
conn.Execute (strExecInsert)
End If
i = i + 1
Wend
'conn.Execute ("commit")
conn.Close
End Sub

How to Scramble BLOB data stored in Tables

I have received a directive from the top management, in their drive to comply with security standards, that BLOB data stored in the database ( e.g., Word, Excel, PDF, .... documents) needs to be scrambled in DEV environment.
I have written up a routine which will scramble CHAR/VARCHAR/NUMBER, as this sounded more logical to me.
But, have come to a stand-still in figuring out how to scramble binary data??????
Is this at all possible? To me, it sounds impossible, but I'm open to ideas.
Has anyone out there thought up of a solution to this?
If so, please do advice.
Eager to know.

Hello Dave & BluShadow,
Thanks for your responses.
So, 10g is the answer huh.... That's not going to make people jump with joy, at least they'll hold off on this for now. My other possible alternative, is to have one dummy BLOB each of Word Doc, Excel, PDF, ... and overwrite each actual file attachment with the dummy. I know... I know.. not the best.
Regarding the management stuff... Hmm... This entire thing comes up because of the policy of refreshing the DEV / TEST environments with the actual production data. They've been doing this for a long long time.... The Good side to this is that they've taken the step in the right direction on this one, though I wish it would have been to totally avoid doing this kind of a refresh and use test data.
Thanks again. Do let me know if there's anyother alternative too.

Hi everybody! How can I transpose data in numbers?

Hi everybody! How can I transpose data in numbers?

If you don't want to go to all the trouble of setting up formulas each time you do this, and making sure the new table is the correct dimensions in the destination table, etc, just run this Automator Service. (Dropbox download)
After double-clicking the .workflow package to install (you may need to click 'Download Anyway' in System Preferences > Privacy & Security) it will look something like this in your Services menu:
After that one-time, one-minute setup, all you have to do to use it is select the range you want to transpose, choose 'Copy Transpose' from the menu, click once in a cell where you want the transposed values to appear, and type command-v or option-shift-command-v to paste. This is similar to (though slightly different from) what one does in Excel.
To remove or rename the Service, in Finder hold down the option key and in the menu Go > Library > Mobile Documents > com~apple~Numbers and delete or rename the way you would any item in Finder.
You can view the short AppleScript the service contains by opening it in Automator.
SG

How can I share data between WinXP Pro and Mac OS 10.8.3 via wifi

How can I share data between WinXP Pro and Mac OS 10.8.3 via home wifi.

MartyP wrote:
Or is there a problem with both OS's writing stuff to the
~/Home/Library folder that may be incompatible?
Yes, big time. Mail, for sure, has a different file/folder structure, and would not be happy.
Plus, a number of apps (Apple and 3rd-party) are "Sandboxed." That's a security feature, to prevent malware or bad coding from affecting things it shouldn't. Some of their files, including the preferences files, aren't even stored in the same places!
Or to other places I'm not aware of?
Probably. If you have two versions of the same app, they may or may not expect the same data setup.
To have one User folder for both OS's would save a lot of drive space
Not if you use some or all of woodmeister50's suggestions.
But I'm also not sure how I'd use Time machine with such a set up.
Just as you do now. By default, Time Machine backs-up everything (except things like system work files, most caches and logs, trash) for all users and all internal drives & partitions. By default, it excludes external drives.
You can change those defaults, of course, via TM Preferences > Options.
See Time Machine - Frequently Asked Question #32 for details and considerations of multiple drives.
Presently I backup with . . . clones to other HD's
Good. Yes, clones are different. You need multiple "tasks" to back up multiple drives/partitions. But once set up, that shouldn't be a big deal.

How to secure Appraisal Data

Similar Messages

Maybe you are looking for