text:
SSIS – An Effortless Two Step Approach to Protect Sensitive Information in Xml Configuration Files
I wanted to grab some text regarding DPAPI and RSA Encryption providers for my talk Beefing up Security in ASP.NET Part 2. But I couldn't find it handy, I had to download a pdf version of this below SSISCipherBoy support guide. Posting here for easy access.
SSIS – An Effortless Two Step Approach to Protect Sensitive Information in Xml Configuration Files
I. Introduction
II. Competitive approaches
III. Prerequisites
IV. Preparing your package for configuration
V. Step 1 – Using SSISCipherBoy.exe – Select and encrypt configuration entries
VI. Step 2 – Using SSISCipherBoy.exe – Prepare the package to decrypt information
VII. Deploying package with encrypted configuration to server – Using SSISCipherBoy.exe – Export/Import RSA key pair
VIII. Common errors and debugging options
IX. What now?
X. Glossary
a. Using SSISCipherBoy.exe – Processing multiple packages sharing same config
b. Using SSISCipherBoy.exe – Dump SSISCipherUtil.dll to GAC / local directory
c. Manually installing SSISCipherUtil.dll to GAC
d. Manually create a ScriptTask to decrypt information
e. What does the automatic Package Processor do?
f. How does the cipher algorithm work?
XI. References and further reading
Writing a tool or an article becomes best when it is a communal effort. While I conceived and developed the library and tool, I want to acknowledge a few people who contributed in various ways.
Balabhadra Pavan Kumar, Dheeraj Dhamija, Balakrishna Allidi for constantly proving feedback, improvement aspects, and for reviewing sections of the support guide.
Manohara Mahadevappa for putting up with me during early development cycles and suggesting a bit of user friendly features.
Narasimha A Prakash, Sriram Seshan for being good enough to support me whenever I approached them.
I. Introduction
One of the ways of saving configuration entries for SSIS packages is an Xml configuration file, probably because they are simple editable text files, portable, and so on. When developing ASP.Net or Windows applications, most of us are cautious enough to encrypt the sensitive information that is saved in their configuration files. Reasons? May be it is thought that ASP.Net applications may reside on a web server that is exposed to outside world and hence they might be susceptible to attacks of sorts, and when that happens, we would not want to expose sensitive information in plain text, so we encrypt them. And the .Net framework provides it as an out-of-the-box functionality. In the most common scenarios that we have known, SSIS packages run as scheduled jobs inside a server that is located far inside the corporate firewall with ports closed, just sitting there in a good hope that 'I am not vulnerable to attacks, so I can just be here with an xml configuration file that has connections strings, besides others things, in plain text'. As protection comes with security applied in various layers, the kind of attitude to rely on good hope and on firewall may just not be enough. In the wake of recent attacks in high profile organizations, if by any miracle, someone infiltrates and steals the data, we don't want to expose further information in plain text. Do we? The risk could even come from a new developer that accidentally performs some unwanted activities on data (by using the information in the xml configuration file saved as plain text) that is meant to be protected from accidental damage, both foreign and domestic. That is the motivation to write this library and executable to help us encrypt information in our SSIS xml configuration files and hence this article. The entire process is done in two simple steps. If you are an experienced developer, read the prerequisites section and proceed directly to section V and VI.
II. Competitive approaches
That said, there are best practices that you can adhere to, like protecting the configuration using Access Control Lists that are tied to your Active Directory efforts, storing configurations in a SQL server database somewhere. Below are two blog entries that talk about our present options.
While there are pros and cons for approaches, they might not suit your need due to restrictions of company's policies. And most developers prefer to encrypt and decrypt using a custom script task. While this is a viable option, it is a lot of effort to write a separate encryption module and unit test it, and not all developers are expert programmers that care about strong cryptography and key management. Most of the times the symmetric key used for encryption/decryption is hardcoded in the script task and the package itself is protected by a password. The encryption algorithm that the proposed library (referred to as SSISCipherUtil.dll from now on) uses state-of-the-art methods of encrypting information that hands over the cryptographic key management to the Windows operating system itself. As a matter of fact the ASP.Net out of the box functionality supports encrypting configuration information using DPAPI and RSA. SSISCipherUtil.dll comes with those two options. DPAPI associates cryptographic key with the windows user accounts and RSA uses key containers. That's just a one liner. More at msdn – DPAPI, RSA.
When you have an encrypted configuration that you would like to be ported across multiple servers, use RSA, export the key pair from one server as xml, import it another server, then destroy the key pair xml file. If the package just sits on one server use RSA or DPAPI.
III. Prerequisites
1. Windows XP or later workstations, Windows Server 2003 or later server operating systems.
2. SSISCipherUtil.dll requires .Net framework 2.0 or later – is the library that helps in encryption/decryption during package setup and at package runtime.
3. SSISCipherBoy.exe requires .Net framework 3.5 or later – is the tool that helps you encrypt/decrypt a configuration entry at design time.
4. Auto code generation functionality of SSISCipherBoy.exe of requires a computer with Business Intelligence Development Studio (BIDS) installation.
5. Requires Administrator Privileges. Run as administrator option if UAC is switched on.
6. Supports only String encryption/decryption. No other data types are allowed.
7. Supports only Package.Variables and Package.Connections collections.
8. Supported Package ProtectionLevel values are DontSaveSensitive, EncryptAllWithPassword, EncryptSensitiveWithPassword. EncryptAllWithUserKey, EncryptSensitiveWithUserKey are supported only when the user account that modifies the package is used to run the package, in the same machine.
Below is the screenshot of the main window of SSISCipherboy.exe. Let's explore the features one by one in later sections.
Fig. 3.1
IV. Preparing your package for configuration
If you here reading this article, I assume that you are an experienced developer that has configured and managed SSIS packages before. However, for the sake of completeness below are msdn references that explain saving SSIS configurations in xml files:
Most important thing, if you don't uncheck the Enable package configurations in SSIS Package Configurations Organize and if there is a configuration set up for the package, then the config files passed to the package using the /config option of dtexec.exe will not be effective. This might seem counter intuitive but that's how SQL Server 2008 Integration Services works.
In the following steps, we will be running an unmodified package named AdvWrksLocalLoad2.dtsx with its original configuration AdvWrksLocalLoad2.dtsConfig, then run the modified package AdvWrksLocalLoad2-Mod.dtsx with an encrypted configuration AdvWrksLocalLoad2.dtsConfig, and then run the latter on a Windows 2008 R2 server (just like a production environment).
V. Step 1 – Using SSISCipherBoy.exe – Select and encrypt configuration entries
Now, without further delay, let's pick a package and let's encrypt its configuration entries. All the samples along with the tools are zipped and attached to this article. If someone's interested in looking through the source code of SSISCipherBoy.exe and SSISCipherUtil.dll or enhancing its functionally or aesthetically, please contact me, I'd be pleased to share them.
Below is a list of files that we will be working with for demonstration.
Fig. 5.1
AdvWrksLocalLoad2.dtsx in Business Intelligence Development Studio is a package that does a few things, and the task the package performs is irrelevant here because we are concentrating on encrypting its configuration values in the xml configuration file. AdvWrksLocalLoad2.dtsx is protected with the password test [ProtectionLevel=EncryptAllWithPassword and PackagePassword=test].
Fig. 5.2
AdvWrksLocalLoad2.dtsConfig is the configuration file for AdvWrksLocalLoad2.dtsx that appears like below in Internet Explorer. As you could see the connection strings are mere plain text.
Fig. 5.3
Let's encrypt them. Run SSISCipherBoy.exe as administrator. This program requires administrator privileges. On Windows systems with User Access Control (UAC) switched on, running as administrator is a mandatory requirement. Otherwise the program will not load properly; you will have to go to Task Manager to end it.
Fig. 5.4
When you run this program on a computer for the first time, it will install SSISCipherUtil.dll to the computer's Global Assembly Cache (GAC).
Fig 5.5
Hit, OK to that warning, and proceed with the success message. Once the program is opened, let's drag and drop the configuration file named AdvWrksLocalLoad2.dtsConfig. Use the Browse button to locate a configuration file if drag and drop does not work. The configuration file will be loaded in a tree view.
Fig. 5.6
Encrypting the values is as simple as selecting them and hitting the Encrypt button. However, if you pay attention to the third item, there is a User ID=EncrDemoUser, however, there is no Password provided for it in the configuration file. When you are exporting connections strings that contain a password, then SSIS Package Configurations Organizer does not export the Password property in the configuration file. It knows that a Password is sensitive information and it does not export the Password for ConnectionString. However, you could add it at your own risk – Just what we have been doing all along.
Before we do anything to this configuration file, lets test run it once.
dtexec.exe /file "C:\Maran\Project stuff\SSISCipherUtil\SSISCipher22.214.171.124\Demo\AdvWrksLocalLoad2.dtsx" /config "C:\Maran\Project stuff\SSISCipherUtil\SSISCipher126.96.36.199\Demo\AdvWrksLocalLoad2.dtsConfig" /DE test
Fig 5.7
The package runs just fine. Let's get back to SSISCipherBoy.exe, right click on the item missing the Password property and click Edit Value to add a Password and hit the Save button.
Fig. 5.8
Once done, we have got two choices of encryption algorithm. To keep things simple: entries encrypted with DPAPI can only be decrypted on the computer on which it is encrypted on, however entries encrypted with RSA can be decrypted on any computer running windows if we export and import the key container used for encryption. So, if we encrypt a configuration entry on our development machine, in order to use the same configuration file across other environments, you will have to export and import the RSA key pair on the target machines using this tool SSISCipherUtil.exe. More about the algorithms are discussed in the Glossary section X-f.
Lets pick the entries that are sensitive, click the Lock/Unlock Selection button, provide a Key Container Name as myrsakey1 (you are free to provide any relevant name for the key container) and hit the Encrypt button. Wait for the success message, and now all the selected entries will be encrypted for you.
Fig. 5.9
Hit Commit changes to the config file button to save the encrypted data back to the file system.
Fig. 5.10
You may, try clicking the Lock/Unlock Selection button and try Encrypt/Decrypt/Edit Value and other operations; however until the time you click Commit changes to the config file, the changes that appear in the tree view will not be saved to the file system.
That's it! You sensitive values are now encrypted. Next step is to prepare your package to decrypt the package at runtime. Don't close the tool already; we will have to use it to generate decryption code.
Fig. 5.11
VI. Step 2 – Using SSISCipherBoy.exe – Prepare the package to ready to decrypt information
In our example, the package AdvWrksLocalLoad2.dtsx uses the configuration file AdvWrksLocalLoad2.dtsConfig. That is the configuration file that we encrypted in the preceding step. The dts runtime in no way knows that the configuration file is encrypted; neither there is a way we could tell it in a command line option. If you have DelayValidation=false (which is the default) in the package, then as soon as it encounters an invalid connection string (a connection string that does not have a name value pair like Initial Catalog, Server, User ID..), it throws exception saying that the validation failed and quits the execution of the job. Let's see how to make a package ready to decrypt information during runtime.
As the AdvWrksLocalLoad2.dtsConfig is open in SSISCipherBoy.exe, check all the encrypted nodes, hit Lock/Unlock Selection and hit Generate decryption code button. This action displays a tip, hitting OK; brings you to the DecryptorCode window.
Fig. 6.1
Fig. 6.2
You are left with two options here.
#1. Manually create a ScriptTask to decrypt information
You can copy the decryption code from the right pane, create a ScriptTask before all other tasks in the target package and replace the scriptmain.cs code with the decryptor code and set the DelayValidation=true. If DelayValidation=false, then an error will be thrown because of invalid connection strings even before any of the tasks are executed. More about manually adding ScriptTask, at Glossary X-d.
#2. Make the package ready for decryption automatically
Drag and Drop a package in to the Package processor, click the Start Processing Below Packages button, and let the tool do the rest of the job for you. If Drag and Drop does not work double click on the package processor area to browse and pick a package. More about how it works, at Glossary X-e.
I am going to demonstrate option #2 here and if you are interested in option #1, refer to Glossary X-d.
With the Decryptorcode window open, add AdvWrksLocalLoad2.dtsx to the package processor and hit Start Processing Below Packages button. Hit OK to the big warning message. If the package is password protected, you will be prompted to enter a password. Enter the password as test and hit Done.
Fig. 6.3
Fig. 6.4
Fig. 6.5
Accept the success message and close the tool. Let's run the modified package with the encrypted configuration file. The modified package will be saved with a –Mod suffix.
dtexec.exe /file "C:\Maran\Project stuff\SSISCipherUtil\SSISCipher126.96.36.199\Demo\AdvWrksLocalLoad2-Mod.dtsx" /config "C:\Maran\Project stuff\SSISCipherUtil\SSISCipher220.127.116.11\Demo\AdvWrksLocalLoad2.dtsConfig" /DE test
The package runs as expected. It prints some base64 encoded strings to the command window, which can be neglected.
Fig. 6.6
That's about it. Now lets try deploying the modfied package AdvWrksLocalLoad2-Mod.dtsx and the config file AdvWrksLocalLoad2.dtsConfig to a Windows 2008 R2 server and test run it.
VII. Deploying package with encrypted configuration to server – Using SSISCipherBoy.exe – Export/Import RSA key pair
As mentioned before, we can use the same encrypted configuration file on any other Windows workstations or servers.
- You would need SSISCipherUtil.dll installed to the Global Assembly Cache (GAC) on the server. GAC is located at C:\Windows\assembly. You can drag and drop the SSISCipherUtil.dll to that folder. Or let the tool do that for you. If you could remember, when the SSISCipherBoy.exe runs for the first time on a computer, it aumatically installs SSISCipherUtil.dll to the GAC. Easiest option, let's to that. Refer to the glossary X-b and X-c on how to install an assembly (dll) to GAC.
- Importing the RSA key pair (that was used to encrypt the configuration) to the the server.
I have logged on to a Windows server and copied the modified package – AdvWrksLocalLoad2-Mod.dtsx – and its config file – AdvWrksLocalLoad2.dtsConfig – to a location, SSISCipherBoy.exe on to my desktop. (You can place it anywhere though) (DTPOutput1.txt and Query.txt are files used by the package)
Fig. 7.1
1. Right click SSISCipherBoy.exe and select Run as administrator. Accept the User Access Control prompts, if any. SSISCipherUtil.dll will be automatically installed to the GAC, and the program loads fine.
Fig. 7.2
2. From our workstation, or from the development machine where we encrypted the configuration, let's export the RSA key container named myrsakey1 and import it to the server. Open SSIScipherBoy.exe on your workstation or development machine (make sure to Run as administrator), provide the key container name that we used for encryption myrsakey1 and hit Export Rsa key pair. Save the file as myrsakey1.xml. And copy it to the server.
Fig. 7.3
Copy the myrsakey1.xml file to the server and use the Import Rsa key pair to import it. You should provide the same name myrsakey1 in the Key Container Name text box.
Fig. 7.4
After, successful import of RSA key pair, Destroy the file myrsakey1.xml and SSISCipherUtil.exe from the server.
That's it! I am going to test run the package using the below command and you will see it working like it did in the development machine.
dtexec.exe /file "G:\Apps\SCOUT\Executables\ExpressNotice\AdvWrksLocalLostTest\AdvWrksLocalLoad2-Mod.dtsx" /config "G:\Apps\SCOUT\Executables\ExpressNotice\AdvWrksLocalLostTest\AdvWrksLocalLoad2.dtsConfig" /DE test
Fig. 7.5
VIII. Common errors and debugging options
- If you get any CryptographicException during decryption, it is possible that
1. You are using DPAPI and trying to decrypt information on some other computer.
2. You are using RSA but you have not exported and imported the key pair (that was used to encrypt) yet.
3. The encrypted string is modified in some way or other and hence decryption failed.
- If you get Connection Manager validations/runtime errors, it is possible that
1. Decryption failed
2. ConnectionString does not contain Password property
3. DelayValidation is set to false and you are getting an error because the ConnectionString property is encrypted. Since it is encrypted, it won't contain strings like User ID, Password, Initial Catalog, Server etc., hence the validation error.
4. EnableConfiguration is set to true (i.e., Enable package configurations check box is checked in the Package Configuration Organizer wizard. And the design time associated configuration file is either missing or not encrypted).
- To debug, the easiest way is to add a script task at the top of the package, and try accessing the Connection Manager's ConnectionString property to see if values are getting decrypted properly. For instance, try logging them, or try a MessageBox.Show(). AdvWrksLocalLoad2.dtsx has a ScriptTask in the beginning that just alerts the ConnectionString values for a few connections.
Fig. 8.1
Or even better, add the package to a an Integration Services Project, set a break point on the ScriptTask and look if the values are getting set correctly.
- If the Package Processor of DecryptorCode window throws any errors, close all Visual Studio instances, and try Start Processing Below Packages button again.
- Rule of thumb, when running SSISCipherBoy.exe always Run as administrator.
IX. What now?
Hence you protect sensitive information in your SSIS Xml Config files. While the aforementioned methods describe an automated way of achieving encryption decryption, if any of the tasks fail, you could always try the manual lengthy process, or if you are interested in more information, the glossary section should suffice. Report any bugs, enhancement requests, set up assistance at https://renouncedthoughts.wordpress.com.
X. Glossary
a. Using SSISCipherBoy.exe – Processing multiple packages sharing same config
Under the heading "Step 2 – Using SSISCipherBoy.exe – Make the package ready to decrypt information" we saw how to process a package and make it ready for decryption. In that demonstration we added a package named AdvWrksLocalLoad2.dtsx that used a configuration named AdvWrksLocalLoad2.dtsConfig, which is a very common scenario. Another, common scenario is that we have one configuration file that will be shared by many packages. To make the job easier in these situations, the DecryptCode functionality allows you to add multiple packages to the Package Processor and process them all at one shot.
Let's imagine that the configuration file named AdvWrksLocalLoad2.dtsConfig is used by multiple packages listed in the figure below.
Fig. a.1
In order to process them, Drag and drop all the packages or double click and select all the packages to the Package Processor of DecryptCode window; hit the Start Processing Below Packages button. Supply password if required, hit OK on the success message that appears after processing each package. If Drag and drop does not work double click and add multiple packages.
Fig. a.2
After processing, the processed packages are stored with a -Mod suffix on the same folder which looks like below.
Fig. a.3
b. Using SSISCipherBoy.exe – Dump SSISCipherUtil.dll to GAC / local directory
The encryption and decryption functionality is provided by the SSISCipherUtil.dll. The SSIS package in our example above that was modified to decrypt information at runtime, uses this dll. And the tool SSISCipherBoy.exe uses the same dll for all its primary operations. However, if you wanted to locate the SSISCipherUtil.dll in the file system, the only location you would find it is in the GAC. In case the assembly installation fails when the SSISCipherBoy.exe loads, you would be required to manually install the SSISCipherUtil.dll to GAC. Or when the package processor fails for some reason, you would want to create a Decryptor ScriptTask yourself manually. And when you create that Decryptor ScriptTask, you would need to Add a reference to the SSISCipherUtil.dll in Visual Studio in order to decrypt values at runtime. In order to accomplish any of these aforementioned tasks, you would need SSISCipherUtil.dll on some known file system location.
Run SSISCipherBoy.exe as administrator. Click the Assembly Administration … link at the top right corner.
Fig. b.1
Fig b.2
Use the buttons to perform the required operations.
c. Manually installing SSISCipherUtil.dll to GAC
Many might have observed that when adding a reference to a third party dll in a ScriptTask, we are bound to get AssemblyLoadException or FileNotFoundException if the referenced dll is not installed to the GAC. SSISCipherBoy.exe tries to install SSISCipherUtil.dll to the GAC at startup. If that does not work you can try installing it to the GAC using the Assembly Administration window. Remember that you need Administrator privileges to perform this task. So you run SSISCipherBoy.exe with administrator privileges at all times. If none of them works, the last resort is to emit the SSIScipherUtil.dll to a specific location and then manually install it to the GAC.
Installing to the GAC is simple.
1à Emit the SSISCipherUtil.dll to some file location (like explained in Glossary X-b)
2à Navigate to C:\Windows\assembly and Drag and Drop the SSISCipherUtil.dll to that folder C:\Windows\assembly. That's it. You may also try to use the GacUtil.exe which is a program specifically meant for this purpose.
Fig. c.1
Fig. c.2
d. Manually create a ScriptTask to decrypt information
The package processor creates a ScriptTask inside a sequence container in the OnPreExecute EventHandler to decrypt information. If the Package Processor fails for some unknown reasons, you can try processing the package again or create a ScriptTask manually to decrypt information.
1à Create a ScriptTask on top of all other tasks in the Control Flow Tab of the Package Designer. Provide a relevant name.
2à Double click to open, hit the Edit Script button. Wait for the Visual Studio to load the project.
Fig. d.1
3à Add reference to the SSISCipherUtil.dll. (If you don't have SSISCipherUtil.dll at you file system yet, use the Assembly Administration … link in SSISCipherBoy.exe and write the dll to some comfortable location – as in Glossary X-b)
Fig. d.2
4à Once the reference is added, replace the entire ScriptMain.cs code with the code from the DecryptorCode window of SSISCipherUtil.exe. Refer to the steps in Step 2 – Using SSISCipherBoy.exe – Make the package ready to decrypt information to copy the decryptor code.
5à Build the project; close the ScriptTask after successful build. Hit OK on the Script Task Editor. Save the dtsx package.
That completes everything, and now your package is modified to decrypt information at runtime. Let the ScriptTask and the SSISCipherUtil.dll do rest of the work for you.
e. What does the automatic Package Processor do?
When you add an SSIS package to the Package Processor of the DecryptorCode window, it does the following things:
- Tries to load the package at the specified location.
- If the package is protected with a password using EncryptAllWithPassword or EncryptSensitiveWithPassword, it prompts to enter the Password.
- On successful load of the package, it checks to see if there is an OnPreExecute EventHandler attached to this package.
- If an OnPreExecute EventHandler is attached to the package, it gets all the Tasks inside the OnPreExecute EventHandler and adds the DecryptionSequence on top of all those tasks.
- If an OnPreExecute EventHandler is not created for the package, it simply creates an OnPreExecute EventHandler and adds the DecryptionSequence to it.
- Inside the DecryptionSequence, there are two script tasks.
- First is a dummy ScriptTask that leads to the second ScriptTask that does the decryption.
- The decryption ScriptTask and the dummy ScriptTask are connected by a PrecedenceConstraint that allows the decryption ScriptTask to run only once during the execution of the package.
i.e., The decryption ScriptTask runs only during the OnPreExecute event of the package, when other tasks in the package fires an OnPreExecute event, the decryption ScriptTask is not called. This is done with the below Expression and Constraint check
@[System::SourceID]== @[System::PackageID]
- Sets DelayValidate=true for the package.
- Sets EnableConfiguration=false for the package. (the equivalent of un-checking Enable Package Configurations in Configuration wizard)
Fig. e.1
f. How does the cipher algorithm work?
SSISCipherUtil.dll supports DPAPI and RSA as we saw earlier. If you have a basic understanding of cryptography, please read forward, otherwise you may want to review the basics of Symmetric key cryptography, asymmetric key cryptography, and hashing. The following paragraphs are meant to give an overview of how DPAPI and RSA are implemented in SSISCipherUtil.dll. They might not depict the exact flow of how DPAPI and RSA work in SSISCipherUtil.dll. The source code is the only way to identify the exact implementation.
DPAPI – known as the Windows Data Protection API associates the cryptographic key used for encryption and decryption with the Windows User account and uses a machine wide key store. An application level entropy value is passed to the DPAPI method, so that only SSISCipherUtil.dll knows how to decrypt values that were encrypted by SSISCipherUtil.dll. The entropy value is an output of the Rfc2898DeriveBytes method that takes SHA-256 hash of some application wide constant values as input and salt.
RSA – an asymmetric cipher algorithm that in the .Net framework, not meant to encrypt inputs that are larger than the key size specified. In SSISCipherUtil.dll, the RSA algorithm is used to generate an exportable/importable public-private key pair stored at the RSA machine level key store. Later the public key components of the key pair are used to derive an entropy value, and the private key components are used to derive an input. The input and the entropy are later hashed with SHA-256 and sent to Rfc2898DeriveBytes. The output of Rfc2898DeriveBytes is used as a master key for RijndaelManaged algorithm which is a symmetric algorithm that works under the covers to encrypt and decrypt when using RSA.
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys is the location in which the RSA key pairs are stored by Windows. That means, when you export/import an RSA key pair, the key pair with the specified key container name is accessed from this location.
References and Further Reading
1. SSIS: Storing Passwords – http://consultingblogs.emc.com/jamiethomson/archive/2007/04/26/SSIS_3A00_-Storing-passwords.aspx
2. SSIS: Encrypted Configurations – http://consultingblogs.emc.com/jamiethomson/archive/2007/05/04/SSIS_3A00_-Encrypted-Configurations.aspx
3. BI xPress Secure Configuration Manager – http://pragmaticworks.com/Products/BI-xPress/Features/SecureConfigurationManager.aspx
4. Understanding how SSIS configurations are applied – http://dougbert.com/blog/post/understand-how-ssis-package-configurations-are-applied.aspx
5. Integration Services Error and Message Reference – http://msdn.microsoft.com/en-us/library/ms345164.aspx
6. Dynamic Package Generation Samples – http://sqlsrvintegrationsrv.codeplex.com/releases/view/17647
7. Samples for creating SSIS packages programmatically – http://blogs.msdn.com/b/mattm/archive/2008/12/30/samples-for-creating-ssis-packages-programmatically.aspx
8. Programmatically recompiling a ScriptTask – http://social.msdn.microsoft.com/Forums/en/sqlintegrationservices/thread/27535ce7-c72c-4ea5-a27a-b34c12c73312
9. RSA class – http://msdn.microsoft.com/en-us/library/system.security.cryptography.rsa.aspx
10. Windows Data Protection – http://msdn.microsoft.com/en-us/library/ms995355.aspx
11. CspKeyContainerInfo class – http://msdn.microsoft.com/en-us/library/system.security.cryptography.cspkeycontainerinfo.aspx


text:
How to Use
the Readings
Inquiry Question
(Barton wrote the following poem as a toast to women who served in the Civil War. It was first presented at a gala dinner held in 1892 by the Women's Relief Corps and was later printed in many newspapers and magazines. The goal of the members of the Women's Relief Corps, many of whose husbands had served in the Civil War, was to ensure that all Civil War veterans were honored and remembered. They helped maintain battlefields and cemeteries and erected many monuments to the troops.)
The women who went to the field, you say,
Of those we recall, there was scarcely a score,
And what would they do if war came again?
*Armbands with distinctive designs meant to distinguish the wearer in some special way.
1) What personality traits of the author can be discerned from reading her poem?
2) How does Barton depict the citizenship qualities of the women she writes about?
3) According to the poem, what roles were women expected to play in the Civil War? What functions did they in fact perform? How do those jobs compare with the ones women have in the military today?
4) Barton mentioned many notable women. Which names did you recognize? Why did she include them? A textbook or reference book (such as Vincent Wilson, Jr.'s The Book of Distinguished American Women) can provide information about the others Barton mentioned. What were their accomplishments?
Reading 3 came from the Papers of Clara Barton, Library of Congress, Manuscript Division.

subset: commoncrawl


text:
It's the most wonderful time of the year, so the song goes, but the demands of the holiday season can also make it the most stressful time as well. Shopping for the perfect gift for family and friends often can be overwhelming, and if there is someone on your list with Alzheimer's disease or dementia, selecting something meaningful can be daunting. Knowing the stage the disease has progressed to is helpful in choosing an appropriate gift. The following are some ideas to ease your shopping stress:
1. Clothing – Choose comfortable, wrinkle-free, easily closable, easily washable clothing. For loved ones living in skilled nursing facilities, be sure that the fabrics you select can withstand high temperature industrial washing and drying. Shoes or slippers with Velcro ties make for easy off and on. Anti-skid socks or a soft, fluffy robe are also good choices.
2. Music and Media – Stimulating the senses in someone with cognitive issues can help to unlock pleasant memories. Ipods loaded with favorite tunes, a cd player with headphones, or videos of old movies and tv shows can bring great pleasure to your loved one.
3. Photo gifts -- Framed photos, talking photo albums or family photo calendars with noted birthdays/ anniversaries can elicit happy memories, help him/her stay connected with family life and are a visual reminder that they are loved.
4. Keepsake memory box -- Creating a box filled with items of significance to your loved one, such as soft items, a favorite stuffed animal, perfume/cologne, a baseball or beads, can create positive emotional experiences and alleviate stress.
5. A large numbered or digital clock -- A bright, easy-to-read clock featuring the time and date can help reduce confusion, maintain orientation and provide your loved one with structure and focus.
6. Fidget quilt – Adorned with assorted shapes, textures and moveable parts, fidget quilts help to soothe restless hands and anxious minds, providing comfort when a loved one is agitated.
7. Books or jigsaw puzzles – large print word game activity books, or puzzles with extra-large pieces are good
brain stimulating and dexterity-building gifts for those in the early stages of cognitive decline.
8. Medical ID jewelry – For those who are confused, wander or have medical issues, an attractive, customizable
bracelet is a practical and fashionable gift choice.
9. Baby doll or interactive stuffed animal -- Lifelike baby dolls can provide a source of comfort and decrease agitation. Interactive companion pets that provide lifelike responses to touch can be very soothing, foster a sense of purpose, encourage socialization and counter boredom. Robotic pets can also help to elicit memories of childhood pets, sparking spontaneous and meaningful conversation.
10. Your presence -- Perhaps the best gift of all, sharing a laugh, cherished memories or a game of cards with a loved one is a priceless gift that will be treasured forever.
Best wishes for a happy holiday from the Gurwin Family of Healthcare Services!
Gurwin Jewish Nursing & Rehabilitation Center is a 5-star, 460-bed nursing care facility located in Commack, Long Island and is part of the Gurwin family of healthcare services. Gurwin offers skilled nursing care, short-term rehabilitation, medical/post-surgical subacute care, respiratory and ventilator dependent care, award-winning medical and social adult day care programs, on-site dialysis, memory care, palliative and hospice care, home care, assisted living, and a proposed independent living community, Fountaingate Gardens, all on a 67-acre campus. Follow Gurwin on Facebook (bit.ly/GurwinNursingRehab) and Twitter (@GurwinJewish).


text:
Walkthrough Video Tour
Floorplan Description
The B11 floorplan boasts a unique design, offering two bedrooms and bathrooms, ample storage, and room to spread out. This layout is truly open-concept living! Always feel included while entertaining from your kitchen where you can enjoy sight lines to the living room and dining room. Enjoy large walk-in closets and high-end finishes throughout in this spacious 1,211 square foot luxury apartment. Please call a member of our friendly leasing staff for more information!
*Pricing and availability subject to change daily.
- 2" Faux-Wooden Blinds
- 24-Hour Fitness Center
- Built-In Computer Niche*
- Car Care Center
- Ceiling Fans with Lighting in Bedrooms & Living Rooms
- Central Mail Location in Each Building
- Corridor Attached Garages*
- Custom Routed Wood Cabinetry with Sleek Hardware
- Cyber Lounge
- Designer Tile Backsplash in Kitchen
- Dog Park
- Double Sink Vanity in Bathrooms*
- Elevator Access
- Framed Vanity Mirrors
- Gourmet Coffee & Hot Tea Bar
- Gourmet Kitchens with Executive Chef Undermount Sink
- Granite Countertops in Bathroom
- Granite Countertops in Kitchen
- Home Intrusion Alarms with Optional Monitoring
- Indoor & Outdoor Kitchens with Lounging Areas
- Indoor Trash Chutes
- Large Pet-Friendly
- Large Walk-In Closets*
- Lofty Nine-Foot Ceilings
- Modern Track & Pendant Lighting
- Online Rent Payment & Maintenance Requests
- Outdoor Bicycle Racks
- Outdoor Gaming with Ping Pong
- Patio/Balcony
- Paw Spa
- Plush Carpet
- Power-Saving Digital Programmable Thermostats
- Relaxing Patio or Balcony*
- Relaxing Saltwater Pool with WiFi, Sun Shelf & Cabanas
- Retreat Views*
- Screened-In Porches*
- Smoke-Free Community
- Soaking Tub*
- Social Lounge with Gaming & TV
- Spin Bikes
- Stainless Steel Appliances
- Storages available to lease
- Two-Story Athletic Club with Cardio, Resistance, & Free Weights
- Two-Tone Paint Scheme
- Upscale Wood-Finish Flooring*
- Walk-In Showers with Rain Shower Heads*
- Washer & Dryer Included
- Yoga Room
* Available for select units
- Dishwasher
- Disposal
- Microwave
- Refrigerator
- Stove
Utilities Paid By Resident
- Cable
- Electricity
- Internet
- Pest Control
- Sewer
- Trash
- Water
Other Floorplans at Artistry at Viera Apartments
Prices Starting at $1429
Prices Starting at $1559
Prices Starting at $1799
Prices Starting at $1804
Prices Starting at $1889
Prices Starting at $1919
Prices Starting at $2019
Prices Starting at $2069
Sign Waitlist
Prices Starting at $1544
Sign Waitlist
Prices Starting at $1709


text:
Maryland Highway Traffic Trends is a summary of the traffic volume data collected by the Data Services Engineering Division (DSED) of the Office of Planning and Preliminary Engineering (OPPE). These are permanent, continuous counting Automatic Traffic Recording (ATR) stations throughout Maryland and seven continuously operating toll facilities. These reports contain tabulated data from these stations.
The purposes of this report are:
For Traffic Trends, the stations were grouped based on functional classification and an additional summer seasonal group to reflect recreational traffic patterns during the summer months. The categories are rural interstate, rural other (including other rural arterials, and rural collectors), urban interstate, urban others (including urban other freeways and expressways and other urban arterial systems) and summer seasonal (stations that display high traffic patterns during the summer season).
The ATR station groups are as follows:
Note: 1
Note: 2
Note: 3
Click Here for the Traffic Trends Systems
707 North Calvert Street
Baltimore, Maryland 21202-3601
Main Business Line – 410-545-0300
Safety Campaigns – 1-800-323-6742
For emergencies, call MDOT SHA's Statewide Operations Center at 410-582-5650.
Privacy Policy
About SHA
Frequently Asked Questions
Press Releases
Public Information Act


text:
New Science Book Fair 2011 Oono Syoji | added on Jul 19, 2011 | Japan Since it's establishment in 1957, we have published Annual catalogue of Science books of Japan to promote spread of science books. This activity allows for the promotion of chemical academic titles in retail stores.
|fair, books, publications
|researchers, students, general public


text:
Office of the President
Jane Gerety, RSM, became the seventh president of Salve Regina in July 2009, bringing to the University a rich variety of academic and administrative experiences, as well as a strong commitment to the Sisters of Mercy and its various missions.
Sister Jane came to Salve Regina from Saint Joseph's Health System in Atlanta, where she served as senior vice president, sponsorship and corporate compliance officer before being appointed executive board officer in 2008.
Prior to her tenure at Saint Joseph's, Sister Jane was the academic dean at Carlow University in Pittsburgh, where she also served as an associate professor of English and director of the public leadership program. She has also taught at the junior high and high school levels.
Sister Jane holds a bachelor's degree in French from Mount Saint Agnes College in Maryland, a master's degree in French from Middlebury College in Vermont and a Ph.D. in English from the University of Michigan.
A member of the University's Board of Trustees since 1995, Sister Jane has served on a number of nonprofit boards, including Saint Joseph's Health System, Saint Joseph's Hospital of Atlanta, Saint Joseph's Mercy Care Services, Saint Joseph's Mercy Foundation, Saint Joseph's Translational Research Institute, Saint Joseph's East Georgia, Saint John's Mercy Medical Center, Mercy Housing – Southeast and Project Adventure.


text:
Added to Cart
Extended Care
Learn more about .
More deals you may like
Jabra Sport Pace Bluetooth Earbuds (Yellow)
Weather and waterproof design for training in all conditions.
Ensure you are training at your best in all conditions with the Jabra Sport Pace Bluetooth Earbuds.
Built for optimal sport performance and comfort, these earbuds deliver premium sound quality without the hassle of wires. Train and listen to your favourite playlist even in tough conditions with these weather resistant earbuds.
- Sweat and rain resistant (P54 rated)
- Meets US military standards for weather and shock
- Ultra-secure fitting
- Reflective cord – perfect for running at night
- Bluetooth and NFC pairing
- Integrates seamlessly with the Jabra fitness app with real-time audio coaching and workout evaluation features
- Control incoming calls, volume and music tracks directly from the device
Weather Resistant Design
With an IP54 waterproof rating, these earbuds are highly durable allowing you train all conditions, rain or shine. The Jabra Sport Pace also feature a reflective cord which keeps you visible at night so you can stay safe while running at night.
Secure Fit
With an ultra-secure fit design, these earbuds will stay comfortable in your ears no matter how intense your workout is. The clever design also delivers outstanding stereo sound quality and so you can enjoy all your favourite tracks while training.
Superior Wireless Sound & Control
With Bluetooth connectivity, these earbuds deliver incredible stereo sound without the restriction of wires. Work out and listen to all your favourite workout tracks in crystal clear sound quality and seamlessly answer calls with the handy control.
Jabra Sport Life App
Download the Jabra Sport Life app and plan and evaluate your workouts! Maximise your workout with features including in-ear coaching and a huge selection of interval and activity based training. The app even monitors and records your heart rate, speed, workout time and calorie intake so you can get the most of your workout.
This Product is offered and supplied by Kogan Australia Pty Ltd pursuant to the Terms and Conditions.
Related CategoriesAM/FM RadiosSmart SpeakersMusical InstrumentsSpeaker DocksCasesBluetooth SpeakersKid's MusicDJ Controllers and DecksMicrophonesAV Receivers & AmplifiersTurntablesIn-Ear HeadphonesAM/FM Radios - AudioHome TheatreiPodsClocksSoundbarsMP3 & MP4 PlayersVoice RecordersComputer SpeakersWireless HeadphonesMusical AccessoriesDigital RadiosOver & On-Ear HeadphonesSpeakers/Subwoofers & Accessories


text:
Earth : Africa : Sahel : Niger : Baleyara
Baleyara is a town in Niger. Located just two hours from Niamey on the route to Filingue.
Get in[edit]
Bush taxis leave early from the Wadatta (prounounced Wa-dah-TAH) gare in Niamey, 1,750F per person in a minivan or slightly more in a station wagon. Or, you can rent out an entire station wagon for 20,000F one-way. One decent driver is Oumarou, 96-62-73-96.
See and Do[edit]
Sunday is market day in Balleyara, a 2-hour drive east from Niamey. The spectacular market gets going at about 10am. Balleyara is known across West Africa for having one of the largest animal markets, with camels, long-horn bulls, horses, sheep, goats, and more for sale. Sellers and buyers come to the Balleyara animal market from all across Niger and other nearby countries. It also has a very lively regular market with a mix of Zarma, Bella, and Fulani cultures.
Buy[edit][add listing]
Eat and Drink[edit]
Street food stands are your best option. You can also find delicious local bread and sweet bread. On the main road just outside the market are a couple of boutiques that serve food such as rice and sauce, omelet sandwiches, etc. Filtered and sealed water is for sale for 25F each, known as "PureWater" (pronounced Pure-Watta)
Sleep[edit][add listing]
There are no hotels in town but there is a new campement/resort about 3km before town, with all the amenities. However, you could also visit Balleyara as just a day-trip from Niamey.
No internet yet in Balleyara (as of 2008). Good cell phone reception.


text:
- Home
- News
- Sports
- Opinion
- Obituaries
- Features
- Special Sections
- Classifieds
- Public Notices
Although I (proudly) finished 98 percent of my holiday shopping weeks ago, I still have a few things to pick up this week. Of course, a couple of those are gift cards, which don't really count — but the others are gifts for those impossible-to-buy-for people in my life.
Fortunately, The Era office is just a block away from some great shops on Main Street in La Grange. I love how unique the offerings are and how much of it is made locally.
I've found goregous ornaments at Gallery 104, cute scarves at Friends & Fiber and locally-authored books at Karen's. Not to mention all the craft supplies I might need for holiday projects at La Grange Arts & Crafts.
Several new businesses have opened in downtown La Grange, so if you haven't been in a while, it might look a bit different. Don't forget, there are a bunch of places to eat, too.
Many of these stores are offering extended holiday hours this season, including staying open later during the Light Up La Grange lightshow. (Check it out nightly Friday through New Year's Eve, 5:30 to 9:30 p.m.; 6:30 on Fridays.)
If you've got a few gifts to go, skip the mall and come to Main Street. The parking is better, the people are nicer and you're sure to find that perfect present.
Add new comment
Read and share your thoughts on this story


text:
Frequently Asked Questions
This page is provided as a quick reference for questions most frequently asked by our employees. Click on a topic to view the questions and the answers.
When is the Annual Enrollment period?
How are flu shots covered under my insurance? / How can I get reimbursed for a flu shot?
All HEB pharmacies can provide a flu shot. The shots must be billed through your medical plan (BlueCross BlueShield) and not the pharmacy plan (Express Scripts|Medco) and the cost should be zero. The BlueCross BlueShield network representative is reaching out to HEB pharmacies across the State to provide a reminder about filing flu shot claims. To avoid issues, be prepared to provide your BCBS insurance card and kindly remind the HEB staff that the shot will need to be billed to BlueCross Blue Shield. If the staff tries to file the flu shot through the pharmacy plan, the patient will charge the employee a $27.00 administrative fee.
All Walgreens are also contracted with BlueCross BlueShield as immunization clinics. Walgreens must also file the flu shots as a BlueCross BlueShield provider rather than process the shot through pharmacy plan with Express Scripts|Medco. To avoid issues, please be prepared to provide your BCBS insurance card and The employee's cost should be zero.
Tarleton's nursing department and other local public agencies are providing flu shots at various times during the next few months. Employees and retirees who have gone to other places such as CVS, or who may have gone to HEB and been charged the $27.00, can submit a paper claim to BlueCross BlueShield and be reimbursed using the BCBS Claim Form.
What are the different types of "Changes in Status" and how do they impact my benefits?
Federal regulations define situations called Changes in Status that allow employees and retirees to change their Flexible Spending Accounts contributions or health, dental, vision or AD&D coverage during a plan year within 60 days of the Change in Status. Changes in Status are:
- Employee's marriage, divorce or death of employee's spouse
- Birth, adoption or death of a dependent child
- Child becoming ineligible for coverage due to reaching age 25 or marrying
- Change in employee's, spouse's or dependent child's employment status that affects eligibility for coverage
- Change in employee's, spouse's or dependent child's residence that affects eligibility for coverage
- Employee's receipt of a qualified medical child support order or letter from the Attorney General ordering the employee to provide (or allowing the employee to drop) medical coverage for a child
- Changes made by a spouse or a dependent child during his/her employer's annual enrollment period
- The employee, spouse or dependent child becoming eligible or ineligible for Medicare or Medicaid
- Significant employer-initiated or carrier-initiated changes in or cancellation of the employee's, spouse's or dependent child's coverage
- Change in day care cost due to a change in provider, change in provider's fees (if the provider is not a relative) or change in number of hours the child needs care (for Dependent Day Care Spending Accounts)
A court order against the spouse of an A&M System employee does not constitute a Change in Status. Also, a change in income, which may affect coverage affordability, does not constitute a Change in Status.
How do I report a "Change in Status" and what is the deadline?
I need to change by beneficiaries. What do I do?
If you participate in the Teacher Retirement System, complete the TRS 15 form or contact TRS at (800) 223-8778 to request this form. If you participate in the Optional Retirement Program (ORP), Tax Deferred Annuity Program or Deferred Compensation Plan, notify your vendor(s) of your new beneficiary.
How do I change my name on my records?
You will need to apply for and obtain a new Social Security card reflecting your new name and provide a copy of the card to your departmental employment processor. Upon receipt of the appropriate paperwork from your department, your Human Resources office will update your personnel and payroll records. If you want to add or drop dependent(s), complete a Dependent Enrollment Form/Certification.
Can I add my grandchild to my insurance coverage?
What forms do I need to complete and how can I continue my insurance coverage if my employment is ending?
I am under the care of a periodontist and have my teeth cleaned twice a year at the periodontist's office and twice a year at my regular dentist's office. Will the plan cover all of my cleanings?
How do I find a Delta Network or Premier dentist in my area?
How do I find a DeltaCare USA dentist in my area?
What is the difference between Basic Life/Basic AD&D, Alternate Basic Life and Optional Life?
If my doctor submits evidence that I must have a drug not on the formulary list for medical reasons, can I get the non formulary drug by paying the formulary copayment?
What is a formulary list?
The formulary is a list of preferred brand-name drugs that have been compared and evaluated with other brands and provide maximum quality and value. Many therapeutic categories (for example, ulcer medications) have two or more brand-name drugs that are used for the same purpose.
To maximize your savings, you should present the list to your physician each time you are to receive a prescription and, when possible, ask your physician to consider the use of generically equivalent alternatives. You are not required to use the drugs on this list, and they are not the only drugs covered by the plan.
How will I know if my prescription will be filled with a brand-name or a generic medication?
What are the key phone numbers for BlueCross BlueShield of Texas?
Precertification: (800) 441-9188
Mental health precertification: (800) 528-7264
BlueCard (for network physician information outside Texas): (800) 810-BLUE
Both precertification numbers can be dialed directly or accessed by calling member services. Member services representatives will be available from 8 a.m. until 8 p.m., Monday through Friday.
What online services/information is available?
The HRConnect online information system is located at sso.tamus.edu. You will need to enter your Universal Identification Number UIN) and a password. If you do not already have a password or do not remember your password, follow the instructions on the login page. HRConnect provides personal, employment, benefits and payroll information on you. It also has a searchable database to help you find answers to your questions on human resource programs. The utilities function can help you calculate your TRS and/or Social Security benefits, how your net pay will change if you contribute to (or increase your contribution to) a Tax-Deferred Account and how much you need to be saving to meet your retirement goals.
More information is also available online. Check the System Benefits website at tamus.edu/benefits for information on benefits and retirement or the System Human resources website tamus.edu/business/human-resources/ for information on holidays and employment opportunities.
I need to change my address and other personal data. What do I do?
You can update or correct your residence and/or mailing address and phone number in HRConnect, or you may contact your Human Resources office for the appropriate form. To change or correct your personal data, such as employment address/phone number, e-mail address, gender, marital status, education level, EEO minority code, disabled/handicapped indicator, veteran status and privacy flag, you may submit your changes through HRConnect or complete an Employee Personal Data Form.If you participate in the Teacher Retirement System, complete the TRS 358 Change of Address form or contact TRS at (800) 223-8778 to request this form. If you participate in the Optional Retirement Program (ORP), Tax Deferred Annuity Program, or Deferred Compensation Plan, notify your vendor(s) of your new address.
Compensation, Position Descriptions, and Job Postings
What username and password do I use to log-in to Tarleton Connection?
How do I update to my job duties that are listed on my job description?
Please contact your immediate supervisor and discuss the changes with him/her. If the changes are needed, your supervisor will then begin a new action in Tarleton Connection as an update ONLY, which will then be approved by Human Resources to make the changes permanent.
What does "Reclassification" mean?
Reclassification is a change from one job position/title to another that typically results in an increase in pay.
Reclassification usually occurs as a result of one of the following:
- A vacant position exists that a supervisor wants to change to a different position to better meet the needs of the department.
- An employee in a current position has mastered all job elements to the point where they now meet the requirements of an existing higher level position.
- An employee in a current position has mastered all job elements to the point where they should meet the requirements of a higher level position, but none currently exist within the University's classification plan.
How do I get my position reclassified?
Employee-Discuss your need to have your position reclassified with your supervisor. Have a list of all of your current duties available to discuss with your supervisor.
Supervisor-You will need to show that the position warrants the need to be reclassified and not just the fact that the employee does more than required. It could be that additional duties are going to be required of the position or that an employee who is currently holding the position has mastered that level of the job. If it is to reclass a current employee a job evaluation will also need to be prepared to accompany the reclass action.
If I am non-exempt how is my salary grade determined?
Your salary grade is determined by comparing the market value for similar external positions to yours and then comparing your position to the pay of other jobs in the organization that require the same level of knowledge, skills and abilities.
How do employees document their leave request?
What happens to an employee's accrued vacation leave if it exceeds the employees maximum annual carry forward amount at the end of the fiscal year?
When I retire, how will I be compensated for the annual leave (vacation leave) I have not used?
Are eligible employees who terminate state employment, but remain on the payroll to exhaust vacation entitlement or accrued state or FLSA compensatory time entitled to payment of longevity?
What is the vacation and sick leave accrual rate for 75- or 50-percent budgeted employees?
For example, a 50%-effort leave-eligible employee with less than two years of state service will earn 4 hours of vacation and 4 hours of sick leave per month.
What absences qualify for Sick Leave use?
You may use sick leave for the following reasons:
- Your Condition – when injury, illness, or pregnancy prevents you from performing your duty
- Care for Your Immediate Family
- Who lives in your household
- Eligible: related by kinship, adoption, or marriage
- Who do NOT live in your household
- Eligible: employee's child, spouse, parent; must have a documented medical condition
- Who lives in your household
When must I provide documentation associated with my sick leave?
You must account for your use of sick leave in the following instances:
- Absences of three continuous working days or less
- Family member not residing in your household: Must provide an explanation of the immediate family member's relationship and need for care and assistance that results from a documented medical condition.
- Absences in excess of three continuous working days
- Your Condition: Medical documentation required indicating estimated date of recovery and cause of illness or some other written statement of the facts concerning the illness that is acceptable to the CEO or his/her designee
- Care for Immediate Family
- Must specify if leave is for family member
- Eligible family members residing and not residing in your household: Must provide a physician's statement that indicates the cause or nature of the illness and estimated recovery date, or other written statement of the facts concerning the illness that is acceptable.
What happens to my sick leave when I retire?
Employees who retire may not have their previous sick leave balances restored in the event they re-employ with another state agency. Employees planning to retire have three options regarding sick leave upon retirement:
- Donate any or all remaining sick leave to the sick leave pool.
- Lose any remaining sick leave upon retirement.
An employee may use any or all of these options; however, upon retirement, the employee's sick leave balance will be zero.
How often can I change my contribution amount to my Tax-Deferred Account (TDA)?
How often can I change Optional Retirement Program (ORP) or TDA vendors?
Am I permitted to transfer my account to a vendor that is not on the approved ORP or TDA list?
Do I have to transfer my existing ORP or TDA account in order to change vendors?
What is the difference between a "Roth" TDA and a traditional TDA?
With a traditional TDA, your contribution is deducted from your pay before federal income tax is calculated, so you do not pay current income tax on your contributions. Likewise, you do not pay current income tax on the investment earnings on your TDA savings. When you make withdrawals from your TDA account upon retirement, you will pay federal income tax on the withdrawals.
With a Roth TDA, your contribution is deducted from your pay after federal income tax is calculated, so you pay current income tax on your contributions. You do not pay income tax on your investment earnings now or in the future. When you make withdrawals from your Roth TDA account upon retirement, you will not pay federal income tax on the withdrawals.
Are loans or hardship withdrawals allowed from an ORP account?
Are loans or hardship withdrawals allowed from a TDA account?
Am I permitted to take a distribution from my ORP account while employed with the A&M System?
Am I permitted to take a distribution from my TDA account while employed with the A&M System?
How much am I permitted to contribute to a TDA account?
How much am I permitted to contribute to the Texa$aver 457 Deferred Compensation Plan (DCP) account?
Can I contribute to the TDA and the Texa$aver DCP at the same time?
Can I contribute to both a traditional TDA and a Roth TDA?
Student Worker and Graduate Assistant Employment
Where can I find a Student Worker?
How do I hire a Graduate Assistant?
What paperwork do I submit to hire a GA or Student Worker?
New hire packets for Student Workers and Graduate Assistants can be found on the Human Resources' website under employment packets at: https://www.tarleton.edu/hr/employment_packets/Employment_Packets.html
Do I have to submit a PBA to terminate my GA even though I put a stop date on the PBA?
Can a GA be employed as a Student Worker also?
What paperwork do I need to submit if I am hiring a GA that is currently or has been a Student Worker?
Do I need to submit a new I-9 Employment Verification form for each employee?
How do I hire a Work Study Student?
Training and Development
Are student workers and graduate assistants required to complete the assigned on-line training?
How do I access the required training courses?
First, you must log-in to Single Sign On (https://sso.tamus.edu), then click on TrainTraq. When TrainTraq opens your assigned training should be listed and you will click on "Start" to launch the course.
The following link web page provides links to more detailed instructions for logging in to Single Sign On and navigating through TrainTraq:
Where can I find a listing of upcoming training classes?
How do I make training assignments for new requirements, such as new training mandated by legislation or regulation?
How do I request a training course be offered?
When are performance evaluations required?
Performance evaluations are required at least annually for budgeted faculty and staff positions. Normally, the annual evaluation period will start near the beginning of March and end near the middle of May. The exact dates may vary depending on specific requirements for the evaluation.
New staff employees are required to have a performance evaluation completed within the first six months of employment.
Existing employees who have been promoted are required to have an evaluation completed within the first 90 days of the promotion.
The supervisor has the option of performing an evaluation more frequently, especially if it is in conjunction with a performance improvement need.
Student workers must be evaluated before a pay raise can be submitted. Periodic evaluation of a long term student worker is recommended as part of that workers development.
How do I initiate a self appraisal?
Self appraisals for faculty and staff are initiated in Tarleton Connection. Instructions for initiating the self appraisal are located on the Performance Management web page in the Human Resources web site.
What are my actions as a supervisor for performance evaluations?
As a supervisor, you have on-going actions associated with performance management, such as setting goals, communicating expectations, and providing periodic feedback on performance.
The performance evaluation is the formal culmination of all of those actions and instructions are provided on the Performance Management web page in the Human Resources web site.
Can I view previous year's evaluations?
Worker's Compensation
What is Workers' Compensation Insurance?
What is a compassable injury?
What is course and scope?
Are there any exceptions to what may be covered by Worker's Compensation?
You may have the right to receive benefits regardless of who was at fault for your injury with a few certain exceptions, such as:
- You were intoxicated at the time of the injury
- You injured yourself on purpose or while trying to injure someone else
- You were injured by another person for personal reasons
- You were injured by an act of God
- Your injury occurred during horseplay
- Your injury occurred while voluntarily participating in an off-duty recreational, social, or athletic activity
If I am injured on the job and need to seek emergency medical attention (ER), will I have to use my paid leave to seek such attention?
What is the employer required to provide to the employee?
Upon hire a Notice of Coverage is given to all employees to sign.
When an injury occurs the injured employee will receive a Copy of employee's rights and responsibilities along with a copy of the first report of injury via mail to the last known address of the employee.
A Notice of the Ombudsman Program is posted for employees to review along with a notice regarding certain work-related communicable diseases on the employer's premises.
What should the injured employee provide to the employer?
The injured employee is responsible for informing his/her employer and Insurance Carrier about any changes regarding the following items:
- Changes in home address or phone number
- Changes in work address or telephone number
- Changes in salary, such as income increase or decrease, or change in employer
What is a Bona Fide letter of employment?
It is a letter that is put into place when employee is returned to work at light duty status. It should be signed and dated before employee returns to work.
What makes a Bona Fide offer valid?
- Offer must be in writing
- Offer must include copy of Work Status Report the offer is based upon
- Location where the employee will be working
- Schedule the employee will be working
- Wages the employee will be paid
- Description of the physical and time requirements of the position
- Statement that the employer will only assign tasks consistent with the employees physical abilities, knowledge and skill, and will provide training if necessary


text:
08 September 2011
I feel like I'm less nostalgic about it all than most parents. I have many fond memories of early grade school, and I've always loved order and routine, so even when the teacher wasn't great or I struggled with the lessons, I remember feeling comforted by the routine of it all. I often find as a parent that it's hard for me to move past my own memories and expectations, so now, as Maddie and Riley prepare for this new adventure, my instinct is to assume that they are eager for it to begin, as I was. They give no sign to the contrary; frankly, the seem completely ambivalent.
It's true that they are going to the same school they went to last year, but now for a full day instead of a half. Still, I think going to a familiar place with some familiar faces makes the idea much less novel. We met their teacher on Tuesday; she is all business. To her factual statement and no-nonsense delivery of, "I have 28 kids in this class and no teacher's aide. I need parent helpers." all I could reply was, "I'm a single working mom; it's impossible for me to commit to a regular volunteer schedule, but I'd be happy to help with any kinds of tasks that can be done at home." I felt guilty, that working mom guilt, but it passed pretty quickly.
The working mom guilt is strange. I find that my guilt relates less to not being with Maddie and Riley, who have been blessed with excellent caretakers and seem to take my working in stride. My guilt comes when I think of all the parents that are in the classroom once a week, twice a week, maybe more; the parents who run the PTA and teach after-school classes; the parents who host Maddie and Riley for playdates. There is a vast array of unpaid, underappreciated volunteers who have a significant impact on Maddie and Riley's daily life and learning. I take full advantage of that—not in the sense of abusing it, but in the sense of benefiting from it—and yet I rarely give anything back to that system. This is not something I can change right now, and my guilt is overwhelmed by my immense gratitude that others can pick up that slack mixed with frustration about our school system and the fact that there is so very much slack to pick up. Alas.
I remember when Maddie and Riley were babies, when John was so sick and then shortly after he died. I remember thinking how very far away this day was, this day when Maddie and Riley would be in school full time. It was impossible to imagine. I won't say that the time has flown. In some ways it has, but in others, not at all. I think the difficulty of the first two to three years of our lives together makes it easier for me to be less nostalgic about this rite of passage that so keenly marks the end of baby, toddler, and very early childhood into this age of the school years. That is not to say that these years will be easy, or even easier. But it feels significant to say goodbye to a period of Maddie and Riley's life during which it was often hard for me to appreciate all that we had together, and when I was often sad and frustrated and feeling alone despite their presence.
Tomorrow morning the kids are allowed to wake me up at 6:30 a.m. There will be baths and showers and new clothes. There will be a choice of lunch to pack or buying lunch at school. My mom and stepdad will come, and we will all walk to school together. Pictures will be taken, the milestone noted and celebrated. Kindergarten. Dios mio.
19 comments:
- Mizasiwa said...
Congrats on getting to this point! I have loved reading your words here and thank you for them.
- 02:43
- Arwen said...
Don't feel guilty for being a working mom. 1) You have no choice. 2) Kids need to see the reality for 90% of the world where moms have to work. 3) Most of the volunteers I encounter at school are working moms like me. I volunteer whenever I can in class and I co-lead Girl Scout and work 50 hours a week. When I ask any of our girl's stay at home parents if they could help with XYZ, they are always too busy.
I can't believe your school has 28 kids to 1 teacher. That's poor government IMO. My daughter's kindergarten class has 12 kids, 1 teacher, 1 aide, various "specials" teachers PLUS parent helpers. Of course, I'm also in a Title I school in a state that's below 45/50 in education so I don't know how much extra hands actually do.
Don't beat yourself up. Most parents don't volunteer and have less excuse than you. Help when you can and where you can.
- 03:26
- Amy said...
Don't feel guilty. I'm a work at home Mom with 3 kids and a 4th due any day now. I have never, ever volunteered for an in-class event, PTA committee, anything. I'll cheerfully buy supplies for class, party favors, whatever the class needs, and I've created flyers for the school at home, but I cannot physically be there. Nor, quite frankly, do I want to be. My oldest was in kindergarten last year, and every event had a "no siblings" policy. Well, with a (at the time) 3 year old and a 1 year old, that left me out.
But it always made me wonder why a class of 22 kids with one teacher and TWO aides needed parent volunteers for craft projects.
- 04:46
- Gina said...
Congratulations! And isn't it nice to have a life milestone where there isn't a lot of anxiety? I often find that I am not anxious about the things that I "should" be, but do get worked up over things that other parents don't care about.
I don't really see myself as the volunteering-in-the-classroom parent either - and I don't have nearly the very valid justification that you do. With two younger children and a part-time job, and the desire to do things for my family like, oh cook healthy dinners I don't think that I will have a lot of time to do so. And quite frankly, while I love being with my kids the idea of being in a room full of five/six year olds does not sound fun. I would not have made a good teacher of young children. =)
We also have very high 25+ kids, no aide, student to teacher ration where I am at (Pasadena) and I don't think the lack of parent volunteers is the problem - I think the lack of support for schools on a government level is.
- 09:01
I stay home with my kids and volunteer at their school, and I watch one of my son's friends after school one day a week while his parents work. I am extremely grateful to have a way to contribute something, and I never feel resentful toward parents who already have their hands full with work/several small children/etc. Don't feel guilty on my account, is all I'm saying.
Sheesh, this is a such a hot-button topic that I'm on eggshells, worried I'm going to offend someone.
- 09:05
- Wabi said...
It's nice that you appreciate the moms who volunteer during school. Before I went back to work full time, that was me. And I just wanted to say that I also really appreciated office-worker parents who donated the supplies, food, or cash needed for activities I did with the kids. There are plenty of different ways to contribute.
- 09:36
- Sandy said...
I agree with what others are saying! It all comes together when parents do what they can. One year I couldn't contribute financially to a Moms Group I was in. But I was grateful for other chances to give back (e.g., subbing for chilccare staff). I had more time and less cash that year!
You are such a great mom!
- 16:08
- michiganme said...
I volunteered a lot in my kids' classes but I didn't do much of the fundraising work that so many parents do. I was always grateful for the folks who put time & energy into those activities. Oh, and all those mom & dads who coach the sports teams---BLESS THEM!
- 16:27
- Sandi said...
If it's any consolation, I am a teacher and we call all those PTA moms the "mommy mafia". Read "Queen Bee Moms and King Pin Dads" and you will feel a lot better and a lot less guilty.
- 18:06
- Rachel said...
Of course you shouldn't feel guilty. But I have felt that way too. I was working at night when K was in kindergarten, so I was able to volunteer regularly. Not so now (although I pitch in occasionally when I can.) On the first day of school she came home with a list of maybe 20 - 30 "volunteer opportunities" from the PTA, most of which take place during my work hours. I am grateful to the parents who are able to do all those things, but I just can't.
Anyway, like you said, the problem is not that you aren't volunteering enough; it's that the parents have to do so much because our society as a whole doesn't support education. Volunteering is a band-aid that isn't going to fix the larger social/ political system.
- 18:52
I'm a teacher and the sahm complain about the working moms to me all the time. I don't know what they are thinking but I haven't a minute to volunteer at my own kid's school b/c of all the things I have to attend for my classroom. Honestly having so many parents in the classroom is stifling. I used to teach older kids and it was nice that the good parents just sent their kids to school with lunch, homework done and dressed appropriately. Let the kids be independent at school!
- 06:07
- OTRgirl said...
Well, you may not be saying it, but the time HAS flown! I've been reading your blog this whole time and I can't believe it's been five years. Wow. I appreciate that you're taking it in stride. With our first coming in the next month, it's strangely comforting to think how fast the baby phase goes by. I've never been a big baby person, though I really enjoy kids of all ages once they're a little more interactive. I'm looking forward to getting to know our son though dreading the first few months. Somehow this post reminds me to take it as it comes and enjoy each phase.
- 19:41
You shouldn't feel bad at all about being a working parent. I'm a SAHM with 4 kids and there is only so much I can do as far as being in the actual classroom. Two of mine are not school age yet and toddlers + classroom events = bad combination! I know teachers do need some help from time to time, but I do think it's gotten a little crazy. My mom is constantly shocked at the "requests" that are being sent home by my kids teachers...she doesn't remember anything but the standard holiday parties when we were little! My neighbor just got an email from her daughters teacher looking for a parent volunteer to "decorate her bulletin board throughout the year". Seriously...she can't decorate her own bulletin board?!?! As long as you can send in a few things from time to time and show up for the Christmas Party, you are good!!!
- 19:52
- Left-Handed Housewife said...
Just wanted to say that I have a schedule that allows me to volunteer at my kids' school, and it's never occurred to me to resent that parents that don't. We all do what we can. I'm sorry to read the comment about the SAHM moms who complain about working parents who don't volunteer. I've not heard those kind of complaints voiced where I am. Really, the best thing you can do is send well-loved, well-fed, well-rested children into the classroom; that will make everyone's job a lot easier, whether you're there hanging up the streamers for the Halloween party or not.
- 19:32
Forget grade school--my children are still in full-time daycare, and parents are STILL asked to volunteer on a regular basis. This usually consists of bringing food for parties and showing up for them at 3:30PM (and boy howdy, do they have a lot of them!) or chaperoning field trips (usually only about two a year). I have tried to do my fair share, but I feel like, the whole reason my kids are in full-time daycare is because I work, you know, FULL-TIME.
I have heard from other mom friends that most volunteer activities in elementary school are during the day. I find this extremely ironic, given that the majority of mothers (and fathers, of course) work during the day. If we are going to do "majority rules" shouldn't most of the volunteer stuff take place at night or on weekends?
Anyway. Sorry for the rant! Please tell Maddie and Riley good luck!!!
- 20:04
- Michele said...
My girls started about a week ago, and I get what you're saying about the guilt. They've always been in full time daycare, so they never knew anyone whose parents stayed home. It was natural for them to be someplace all day. This morning I heard, "Mom - why don't I get to go home when the other kids do? I'm the ONLY ONE who doesn't get to go."
I use almost all my vacation time to volunteer and help out when I can. That said, I'm skipping the first PTA meeting tonight to actually spend time with my kids.
- 05:29
- suz said...
I was reading recently something that Forrest Church said, his mantra to living well is: Do what you can, want what you have, and be who you are.
I think it's a good thing for the single working mom to remember (I fall in this group). Just do what you can.
- 13:30
- The Fam said...
Kindergarten? Piano? New house? I have a lot of catching up to do!
I hope they love it all. You too.
- 21:07
- lightshines said...
Oh goodness, don't feel guilty. I too am a working Mom. I am not able to volunteer in the class every week. I can do a couple of class parties a year and provide a snack or drink when needed. I send extra supplies for the class or things that may be asked for.
- 10:04


text:
'Africa's father of the internet:' Web pioneer on bringing a continent online
He says more African businesses must develop and host content
Diane McCarthy | 9/4/2013, 9:08 a.m.
CNN If you're reading this somewhere in Africa, then perhaps you should thank Nii Quaynor.
The Ghanaian professor is known as "Africa's father of the internet," a web pioneer who helped establish some of the continent's first online connections.
For some 20 years now, soft-spoken Quaynor has been at the forefront of web development across Africa. He is the first African to be elected to the board of ICANN, the internet corporation for assigned names and numbers. He's also played an important part in launching the African Network Operators Group and AfriNIC, the African internet numbers registry.
As a result, Quaynor was recently inducted into the Internet Hall of Fame, lauded as an instrumental figure "in the early design and development of the internet." He is today chairman of Ghana's information technology agency and a professor at the country's Cape Coast University.
CNN's African Voices spoke to Quaynor about the role of the internet in Africa's development and his dreams for the continent's digital future. An edited version of the interview follows.
CNN: How did you get the title of father of the internet in Africa?
Nii Quaynor: Actually I don't know, but perhaps I made a lot of effort to get my colleagues to understand and to participate and to begin to contribute to the internet. And I have been fortunate with a very good educational background and so I also wanted to impart the knowledge and I was a major contributor in building some of the important technical institutions that make up the internet ecosystem in Africa. In the process of doing that a lot of people perhaps felt that my leadership was good for them, and you might say, gave me that kind of description.
CNN: What is the state of the internet in the continent?
NQ: The health of the internet in Africa is good; we have good connectivity, at least to major capital cities; we also have good wireless through the mobile companies and other forms of connectivity, so connectivity is becoming less of a barrier, except that we are still working on the affordability side of that connectivity.
The part that we are yet to, in some sense, make headway is both in the use as well as in we being part of the production side of services for the internet.
We don't have many businesses developing content or hosting content or doing e-commerce -- we have some banks trying to do internet banking, meaning we having companies beginning to adopt it, but we really haven't taken hold of it. Some of it may be because of inadequate policies, because our policies historically have been about the transmission side of things and so we need to take another look at how a country thinks about developing its internet.
So we have a big challenge -- actually, we see it as an opportunity. Connectivity is not the problem, now it's shifting to the industry and we need to really build strong industries that will serve the needs of the one billion people in Africa.


text:
Tag Archives: miracle
Abundance Imagined
It never ceases to amaze me how the Universe delivers little miracles of the divine. This image was delivered via a beautiful woman, inside and out, who I am blessed to know. She posted it. I saw it. Then I truly … Continue reading
Posted in abundance, choice, compassion forgiveness, divine and spirit, faith, grace gratitude, love, mind tilt, new thoughts, synchronicity, the brain, things that make you go 'hmmm'..., things that make you go 'mmmmm'..., trust, wisdom Tagged abundance, emotion, grace and faith, human, love, miracle, New Age, spirituality, synchronicity, the Universe, trust Leave a comment


text:
Highlights from Thursday's organized team activity session, the last time the media will see the Raiders as a group until they convene at the Napa Marriott on July 25, with practice starting the following day:
— Cornerback Michael Waddell intercepted an Andrew Walter pass on the dead run and returned it for a touchdown on the final play of the session.
The first-team offense avoided a turnover, but didn't manage to move into position for even a field goal attempt during their two-minute drill. A JaMarcus Russell pass bounced off the hands of running back Justin Fargas on fourth down.
— Midway through the two-minute drill, defensive tackle Terdell Sands was looking for shade and bent over at the waist near the hydraulic lift machine, gasping for air. Sands was back at practice after missing last week's OTA due to a personal matter.
— Free safety Gibril Wilson missed practice for the second straight week with another personal matter, which arose Monday, Kiffin said.
Wilson's absence gave rookie fourth-round draft pick Tyvon Branch work with the first team.
" It's been great for him and he's really seized the opportunity," Kiffin said. "That's what happens and we don't look at when somebody's not here as that guy not being here. We look at it as more reps for someone else and more guys to seize the opportunity at different positions. Tyvon's done a great job."
Although there were no major gaffes Wednesday, this quote has the earmarks of Kiffin talking up a rookie's confidence. Branch has struggled in coverage during most media sessions. Known as a big hitter and a sure tackler, Branch's true worth will become more apparent during training camp.
— During one team session, Russell saw an opening and ran up the middle up for a 12-yard gain, prompting an exasperated Keith Millard to chastize his defensive linemen.
"C'mon, guys," Milllard urged.
Kiffin agreed with the assessment that people don't realize how mobile Russell truly is and noted, "I think they'll forget how hard he is to bring down, too. There's a lot of plays in college where guys are draped on him and they can't bring him down because of his size and strength."
— Rookie Trevor Scott was getting work with the first team at right end, although it should be noted the Raiders were substituting liberally.
— Fourth-round draft pick Arman Shields is not practicing with a hamstring pull _ he's been out since the rookie minicamp _ and it has put him behind fellow rookie Chaz Schilens, a seventh-round pick of similar size who has had some solid moments.
"It puts him in a hard situation," Kiffin said. "It puts him behind right away. It's a lot of work. Those other guys have gotten a lot of work and a lot of work with these quarterbacks. But the first day of training camp isn't the first thing he can do. He'll be in there this offseason so he can throw, he can work with our coaching staff at certain times. It's up to him how fast he catches up."
— With both Kirk Morrison and Thomas Howard missing practice with previous engagements, it meant a lot of practice time for Ricky Brown and Jon Alston, both hoping to remain as reserve linebackers/special teams players.
Alston prompted a brief sideline scuffle with a hit on Drew Carter on the sideline which was clearly beyond the bounds of the "no contact" limitations.
— Chris McFoy beat Chris Johnson in a seven-on-seven drill and hauled in a perfectly thrown corner route from Walter, prompting a playful headslap by Johnson to McFoy after the play.
— Tight end Tony Stewart, who was active for 16 games but did not catch a pass last season, made several catches Wednesday, including one difficult, juggling grab.
— Free safety Hiram Eugene made a nice break on Walter pass intended for McFoy and broke up the play.
— Jarrod Cooper, apparently fully recovered from ACL surgery, was back on the field with no restrictions and was getting lots of defensive work. Always quick to apply the needle to a teammate, Cooper's target Wednesday was Johnnie Lee Higgins.
"Hey Higgins, make a play," Cooper said.
Later, Cooper urged Russell, "Throw it to Higgins. He hasn't made a play in two weeks."
— Center Jake Grove, who hasn't practiced through minicamps and OTAs following offseason surgery, looks more bulky, but Kiffin believes the weight is well distributed.
"Jake's doing extremely well with what he can do as far as the weight room and rehab," Kiffin said. "We've got a lot of expectations for Jake to come in and battle for the starting spot at center."
Chris Morris was back working with the first team at center after giving way to John Wade last week.
— Justin Griffith missed practice to run a youth sports camp, with Tony Jackson getting most of the work at fullback. Oren O'Neal remained sidelined with a hamstring pull, watching from the sidelines.
— Marques Tuiasosopo looks as if he could challenge Walter for the starting job, operating in an offense more suited to his skill set than the systems run by Norv Turner and then Art Shell/Tom Walsh.
"He's done a real good job, especially in the move-the-ball situations, moving the ball around and getting it to the right people," Kiffin said. "It feels like he's been here a long time."
That must of been the problem with Shell and Walsh. Not enough "move-the-ball" situations and too many instances of "drop back and look for a soft place to land."
— Kiffin continues to laud Russell's preparation and work ethic, and Russell said he is working as hard mentally as he is physically.
"I have everything on DVD and I watch it at home myself," Russell said. "Everything _ runs, steps or pass settings _ anything that I can become good at _ I go home and look it over myself."
— Russell said he planned on getting some R&R time, but wouldn't overdo it, joking that stories would surface that he is "back up to" 300 pounds.
— The Raiders opted to make Wednesday's session open, keeping their final session out of the prying eyes of the media.
"Tomorrow we'll go to more of a team format, kind of have fun with guys, divide them up, let them play a little bit," Kiffin said.
A Raiders spokesman confirmed there would be no confirmation of Javon Walker getting into town Wednesday night and that Walker would not be available for interviews Thursday.


text:
Child psychiatrist Vero Buschmann says she was looking for a way to get rid of leftovers without having to throw them away. At the same time, the Berlin resident wanted to meet new people.
She found a nonprofit website in Germany that allows her to do both. On a recent evening, her doorbell rings and she buzzes Franzi Zimmerman in to her fifth-floor apartment.
"I have a whole bunch of baked goods I just picked up from the baker," Buschmann tells her 29-year-old guest. "You can take as much as you want!" She also offers some soup and chutney, made from her leftover produce.
Zimmerman laughs and replies: "Wow, that's really great. Homemade soup? It doesn't get better than that!"
Such exchanges between strangers are happening in more than 240 cities across Germany through Foodsharing.de (for English, click on the tiny British flag on the top left), a website that connects people who have free food to give away with people seeking those items.
Got leftovers from Saturday night's party? Post them. Need an egg for your cake? Find it.
Some 40 tons of food have been given away via the network since it began online 18 months ago. More than 41,000 people have signed up. The nonprofit website's creators say their goal is to prevent large amounts of produce, bread and other perishable food from being thrown away.
Food waste is not just a German problem, says website co-founder Valentin Thurn. He's a Cologne-based filmmaker whose documentary, Taste the Waste, lays out in jolting terms just how much food Europeans throw away each year – 90 million tons worth, to be exact. It's a phenomenon that costs the European economy more than $130 billion every year — up to half of fruits and vegetables picked at harvest time, he says.
Thurn says those facts spurred him into action, as did being raised by parents who grew up during the austere times of World War II and taught him the value of conservation.
He and several friends decided the "sharing economy" approach used by people to share or swap work space, cars and homes could work for their food-saving venture.
"With food, obviously there is a health risk associated, so we needed to establish some rules," Thurn says. He says the Web team worked with lawyers to ensure the network didn't violate any German or European regulations governing food.
As a result, it doesn't offer meats or other products that have "sell by" dates, concentrating instead on food items with "best before" labels.
There are no inspectors checking on food offered through the network, but consumers are encouraged to go online and rate the food they've received, Thurn says.
He adds: "And this is the most astonishing thing: We had complaints maybe about this person or that person not being so polite, but we never had any complaints about the quality of the food."
Users of the site also assume liability by signing a clause that says they won't sue the food providers, Buschmann says. "So it's just on your own responsibility and of course if it smells maybe weird or something, maybe better don't eat it."
The way the website works is simple: You sign up as a member and either list a "basket" with approved food items you have available for pick up or find a "basket" if you are looking for certain foods. Also, for anyone about to cook and find they are short on an ingredient or are looking for people to share any excess, there's a third, "food-sharing," option.
"We want to bring back this sharing idea into the modern world because food is not just a commodity," Thurn says. It "should be considered as something different, as the basis of our life."
He adds the service is free and any money needed to run the website and do advertising comes from grants and donations.
Thurn says the network is also working with volunteers who collect produce and baked goods from supermarkets and other outlets that would otherwise throw those perishables away.
At a Neukölln neighborhood bakery in Berlin, baker Ali Cengiz says he's happy to donate food to the network.
"We would have to throw this away if it weren't picked up and that would cost us money," Cengiz says. "And with this food sharing, we also have the opportunity to do something good."
From NPR News, this is ALL THINGS CONSIDERED. I'm Audie Cornish.
And I'm Melissa Block. Activists in Europe say, more than half the food available on the continent ends up in the trash. They say, it costs the economy there more than $130 billion a year. In Germany, the revelations have sparked a wave of popular movements aimed at curbing food waste. Among the most successful is a website called foodsharing.de. From Berlin, NPR's Soraya Sarhaddi Nelson has the story.
SORAYA SARHADDI NELSON, BYLINE: One of the food sharing Internet site's founders is Cologne filmmaker Valentin Thurn.
His documentary, called "Taste the Waste," lays out in jolting terms how much food Europeans throw away each year - 90 million tons worth, to be exact. That's enough to fill three million trucks stretched around the equator, according to the film. In addition, up to 50 percent of produce harvested at farms is thrown out, including tomatoes, the film says.
UNIDENTIFIED MAN: The computer checks the color to make sure they're right. And if they're the wrong color, they get zipped off to the side and thrown away.
NELSON: Thurn says those statistics, as well as having parents who were hungry as children during World War II, led him on a mission with like-minded friends to try and stop so much food from being thrown away.
VALENTIN THURN: A lot of people ask for solutions, especially the younger ones in our team. They came up the idea. Well, everybody's talking about the sharing economy and they share everything. Why not food?
NELSON: This sharing or collaborative economy, which relies heavily on the Internet and makes available people's homes, cars and services among other things is a fast-growing trend around the globe. Filmmaker Thurn says applying that concept to thrown out food was an easy.
THURN: It was a little bit more tricky because food - obviously, there is a health risk associated, so we needed to establish some rules.
BLOCK: Thurn says after exhaustive work and consultation with lawyers, they created the nonprofit website called foodsharing.de 18 months ago. The concept is simple - connect individuals who have food that is still good, but they can no longer use, with people seeking food for their personal use. Thurn says donations and grants pay for the upkeep of the website and advertisement, but the work is done by volunteers. Various supermarkets and bakers are also linked to the network, providing edible goods those businesses would otherwise throw away. These days, more than 240 German cities and 41,000 people are part of foodsharing.de. Thurn says that in the first year alone, they had a million visitors to the Internet site. One food sharer on the site is Wero Buschmann, who lives in Berlin.
WERO BUSCHMANN: Hello, how are you? Hello. Hello. OK. (German spoken).
NELSON: The child psychiatrist greets customer Franzi Zimmerman at the door and tells her to come in. The doctor shows the 26-year-old the bread she's picked up from the baker, as well as soup and chutney she's prepared, to which Zimmerman replies, wow, homemade soup - that's great. There's nothing better.
FRANZI ZIMMERMAN: (German spoken).
NELSON: Zimmerman, who is vegan, says, she often uses the food sharing website.
ZIMMERMAN: I do many things, but I'm totally broke most of the time, so this is, like - this is a perfect opportunity to save money. And there's so much food wasted. Nobody's using it. That's why I tried to - yeah - to get most of my food out of the dumpster or to - from food sharing.
NELSON: Child psychiatrist Buschmann says, she likes the idea of a shared economy, which is also why she joined CouchSurfing.org, a group that links international travelers with people willing to share their homes for free. Buschmann says she loves foodsharing.de because it does something good for society, not to mention the wide range of people she gets to meet. And the doctor says, she finds the program more dignified than food banks in Germany, which require recipients to register and to line up to collect food.
BUSCHMANN: I know many people who just feel ashamed to do this because everyone can see that they're queuing for this food bank thing.
NELSON: Food Sharing cofounder Thurn agrees, adding they alternate days with the food banks on who gets the surplus from vendors. But he says, there are limits to the kinds of foods his network provides. Vegetables, bread and other items that list best before labels are allowed. Foods like meat, with sell by dates, are not.
THURN: We cannot make sure that the cooling chain has been without any gap, so we don't take it at all. And this way, we avoid, like, 99 percent of the risks.
NELSON: He adds that people are encouraged to use the website to rate the food they get and haven't gotten any complaints. The doctor, Buschmann, says, participants in foodsharing.de also assume the liability for what they give and receive.
BUSCHMANN: By signing in, you sign, also, an application that you will not sue the shop for whatever happens to you when you eat the food. So it's just on your own responsibility. And of course, if it smells maybe weird or something, maybe don't eat it.
NELSON: The food sharing website works with volunteers called food savers, who pick up wares from supermarkets and bakers, like Ali Cengiz.
ALI CENGIZ: (German spoken).
NELSON: The baker says, through this food sharing not only do we feel we are doing something good, but we save money because it costs to haul all thus stuff away as trash. Soraya Sarhaddi Nelson, NPR News, Berlin. Transcript provided by NPR, Copyright NPR.