Controlling TCL in OpenInsight 10 (Reporting and Printing)

Controlling TCL in OpenInsight 10

OpenInsight 10 can be enhanced to enable developers to filter TCL commands, or in other words, to only show TCL commands that the developer wishes to expose to their end users.  For example, it is often a requirement or wish, for DELETE to be removed or screened from the users because it can cause issues.  However, it would be useful if LIST could be exposed so that knowledgeable end users could run list commands for quickly produced ad-hoc reports.

As an OpenInsight developer, you initially need to make a record in the SYSENV file.  This record should have a key with one of the options noted below:

TCLCMDS*APPNAME*USERNAME

TCLCMDS**USERNAME

TCLCMDS*APPNAME

TCLCMDS

In this record, you should enter a command that you want your users to have access to and be able to use from TCL (as shown below).  The user will then be limited to using only those commands by typing the commands into the TCL as normal.  The TCL Assistant will also then only show those commands that are available to the users.

Now, with the options set as above, when the TCL Assistant button is pressed the user will be given a filtered list of available commands (as shown below).

If the user tries to be clever and force a command that has been filtered out of the available options (for example, DELETE or COPY_ROW), OpenInsight will return a ‘command not supported’ message and the command will not run.

This now enables developers to safely expose TCL with the controls that ensure that their systems are safe and that end users cannot run a command that is not unsupported by the developer in their application.

Fully Implemented in OpenInsight 10.0.3 and above.