Configuration settings¶

This library has a small direct configuration footprint centered on clsPolicySecurity.Initialize(), which reads three Environment API keys to construct the secondary SQL Server BDS connection. Oracle policy-data access and one SQL Server team-assignment email lookup path are injected as IDataPortalInfo dependencies rather than being built from local configuration. Operational risk remains because the BDS values are not validated and the bdsDatabase key name is misleading: it carries the server name, not the database name.

Configuration retrieval methods¶

Method	Class / Interface	Namespace	Usage pattern
`AppGlobal.EnvironmentService.GetConfigSetting`	`EnvironmentService`	`SAIF.BOF.Framework.Security`*	Reads `BDS_USER`, `bdsDatabase`, and `BDS_DATABASENAME` once during `clsPolicySecurity.Initialize()` before constructing `clsSQLDataLayer`.
Injected `IDataPortalInfo`	`IDataPortalInfo`	SAIF BOF data portal*	Caller supplies Oracle and optional SQL Server data portals to business objects and collections.
Configuration file provider registration	`oracle.manageddataaccess.client` section handler	`Oracle.ManagedDataAccess`	`app.config` and `Web.config` register ODP.NET provider metadata; library code does not read the section directly.

Environment API settings¶

Settings retrieved via IEnvironmentService (centralized environment configuration service).

Setting key	Method	Data type	Purpose	Consuming class	Source
`BDS_USER`	`GetConfigSetting`	`String`	SQL Server BDS database user identifier passed to `clsSQLDataLayer`	`clsPolicySecurity`	`SAIF.Business.View.Policy/clsPolicySecurity.vb`
`bdsDatabase`	`GetConfigSetting`	`String`	SQL Server host / instance name for the BDS connection despite the misleading key name	`clsPolicySecurity`	`SAIF.Business.View.Policy/clsPolicySecurity.vb`
`BDS_DATABASENAME`	`GetConfigSetting`	`String`	SQL Server catalog name for the BDS connection	`clsPolicySecurity`	`SAIF.Business.View.Policy/clsPolicySecurity.vb`

AppSettings (Web.config)¶

None found. The compiled source contains no ConfigurationManager.AppSettings access, and neither app.config nor Web.config declares an <appSettings> section.

Database connection configuration¶

Connection strings and database provider settings consumed by this library.

Connection name	Provider	Retrieval method	Purpose	Source
Primary Oracle policy-data connection (`DPI`)	Oracle / ODP.NET*	Injected `IDataPortalInfo`	Supplies the main policy, association, audit, address, and trading-as data path	`SAIF.Business.View.Policy/clsPolicyData.vb`, `SAIF.Business.View.Policy/clsPolicySecurity.vb`
SQL Server BDS security connection (`DPISql`)	Microsoft SQL Server	Constructed by `clsSQLDataLayer(bdsUser, bdsServer, bdsDatabaseName, SecurityPrincipal.UserName.ToString)`	Supports group, loss-control, and agent authorization plus BDS policy-list lookups	`SAIF.Business.View.Policy/clsPolicySecurity.vb`
Team-assignment email SQL Server connection	Microsoft SQL Server*	Injected `IDataPortalInfo`	Supports `cp_external_client_lookup` for external team-member email resolution	`SAIF.Business.View.Policy/clsTeamAssignment.vb`

Secure settings¶

None found. No GetSecureConfigSetting, encrypted configuration sections, DPAPI helpers, tokens, or credentials are referenced in this library's code or configuration files.

Configuration dependencies¶

Dependency	Type	Required at	Impact if missing
`AppGlobal.EnvironmentService`	service	Runtime when `clsPolicySecurity` is constructed	BDS connection values cannot be resolved; authorization paths that rely on BDS fail
`BDS_USER`	environment setting	Runtime during `clsPolicySecurity.Initialize()`	SQL Server BDS connection cannot be constructed correctly
`bdsDatabase`	environment setting	Runtime during `clsPolicySecurity.Initialize()`	BDS server cannot be targeted correctly
`BDS_DATABASENAME`	environment setting	Runtime during `clsPolicySecurity.Initialize()`	BDS catalog cannot be selected correctly
Injected Oracle `IDataPortalInfo`	service / object dependency	Request-time business-object creation	Primary Oracle reads cannot execute
Injected SQL Server `IDataPortalInfo` for team assignment	service / object dependency	Request-time team-assignment email initialization	External email lookup falls back to empty or alternate Oracle path depending on caller behavior*
`oracle.manageddataaccess.client` provider registration	configuration section	Startup / provider resolution	Oracle provider resolution may fail in hosts that rely on local config registration*

Note: Statements marked with * were inferred from code structure, naming conventions, or contextual evidence where direct confirmation was not available in source artifacts.

Sources¶

SAIF.Business.View.Policy/app.config
SAIF.Business.View.Policy/clsPolicySecurity.vb
SAIF.Business.View.Policy/clsTeamAssignment.vb
SAIF.Business.View.Policy/Web.config