Policy Guide › Data Lookup › Command Variables › Labeled <Offlimits>

Labeled <Offlimits>

For userattr and mapi commands only.

labeled <offlimits> is an optional subexpression that you can use to identify the Address Book property or user attribute for which the data lookup command returned a True value and, as a consequence, caused the control trigger to activate. The property or attribute is assigned to the <offlimits> variable for inclusion in a user notification message.

This is especially useful if an e-mail is sent to lots of recipients, but only a small number of these have attributes or properties that disqualify them from receiving the e-mail. <offlimits>, when used in conjunction with <fallguy>, permits you to identify these recipients and highlight their disqualifying property or attribute. In turn, this enables the sender to remove them from the addressees before resending the e-mail.

Variable names

<offlimits> is a variable name chosen by you and, like all user notification variables, must be enclosed in percent marks. You must not choose a variable name already used by CA Data Protection. For example, one way to ensure your chosen variable name is acceptable is to include your company in the variable name. For example:

%XYZ_taboo_team%

For details about incorporating <offlimits> variables into a user notification message.

IS example

<offlimits> subexpressions are most easily understood in terms of data lookup commands that use an IS operator. In the example below, e-mails sent to members of certain teams (Equity Markets, Debt Markets or Securities Services) cause a control trigger to activate. For each 'disqualifying' recipient, their team name is written to the variable %XYZ_taboo_team%:

userattr WITH any %recipient% WHERE Team labeled %XYZ_taboo_team% IS ANY {"Equity Markets","Debt Markets","Securities Serv"}

For example, if a user attempts to send an e-mail to members of the Equity Markets team. %XYZ_taboo_team% is set to 'Equity Markets'. Likewise, if multiple unauthorized recipients are detected, the Data Lookup command writes all of their teams to %XYZ_taboo_team%. These are displayed in the notification dialog as a comma-separated list:

Equity Markets,Debt Markets,Securities Services

IS NOT example

If you use an IS NOT operator in a data lookup command, <offlimits> works as normal and returns the attribute or property of every recipient for whom the data lookup command returned a True value. But you need to remember that the command logic is reversed!

For example, the command below returns a True value if none of the recipients are directors. In this case, the actual rank of each recipient is written to the variable %XYZ_too_junior% (because in each case, the recipient is not a director and so the test returns a True value):

userattr WITH all %recipient% WHERE Rank labeled %XYZ_too_junior% IS NOT "director"

For example, if none of the recipients are directors then %XYZ_too_junior% will contain a list of the ranks that were detected, for example:

Intern,Management trainee,Non-officer

More information:

Address Book Lookup

User Attribute Lookup