Field, edit, and validation procedures in a multilevel-secure environment

In a multilevel-secure environment, field procedures, edit procedures, and validation procedures operate in certain ways.

  • Field procedures are not allowed on a security label column. Edit procedures that are defined as WITH ROW ATTRIBUTES are not allowed on a table with a security label column.
  • Validation procedures are allowed on a table that is defined with a security label column. When an authorized user with write-down privilege makes an INSERT or UPDATE request for a row, the validation procedure passes the new row with the security label of the user. If the authorized user does not have write-down privilege, the security label of the row remains the same.