Backup Permissions
Posted in 2010
Topics: Security, Permissions & Auditing
Isn't there a new permission you can grant to a user that will allow them to do backups? I am having a hard time figuring out how to find it in the manuals. Thanks! Kate Tomchik [ kate@iiug.org ] www.iiug.org International Informix Users Group Board of Directors A computer lets you make more mistakes faster than any invention in human history - with the possible exceptions of handguns and tequila. Mitch Ratliffe
Hi, I thought it still would be that you add the user to the UNIX group named "bargroup". If the group doesn't exist ... you've to create it (-> /etc/groups). Regards, Martin -- Martin Fuerderer IBM Informix Development Munich, Germany Information Management IBM Deutschland Research & Development GmbH Chairman of the Supervisory Board: Martin Jetter Board of Management: Dirk Wittkopp Corporate Seat: Boeblingen, Germany Reg.-Gericht: Amtsgericht Stuttgart, HRB 243294 ids-bounces@iiug.org wrote on 11/11/2010 06:10:48 PM: > > Isn't there a new permission you can grant to a user that will allow them to > do backups? I am having a hard time figuring out how to find it in the > manuals. > > Thanks! > Kate Tomchik [ kate@iiug.org ] www.iiug.org > International Informix Users Group Board of Directors > > A computer lets you make more mistakes faster than any invention in human > history - with the possible exceptions of handguns and tequila. > Mitch Ratliffe > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. >
I have found that adding user to group informix will allow them to do backups .Though it might let them do other things as well which you might not want them to do
On Thu, Nov 11, 2010 at 6:36 PM, KARL OLIVER <karl.oliver@maf.govt.nz>wrote:
> I have found that adding user to group informix will allow them to do
> backups
> ..Though it might let them do other things as well which you might not want
> them to do
>
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
NEVER do that (for that reason at least).
A user in the informix group can do all sorts of tricks and simply destroy
your instance (remember the chunks are informix:informix 660.... need to say
anymore?)
If the user needs to do maintenance tasks create a special group for it and
implement role separation. It's one of the best things in Informix... (other
databases will charge heavily for similar features).
Role separation can be done after installation (I even done it on live -
without downtime - systems and it mostly works.... although I don't
recommend this and it's not supported).
The group for DBSAs can be any group. The group for backup operators must be
"bargroup". It should be in the docs somewhere... I keep forgetting if this
applies to ontape (it does for onbar). Hmmmm.... a quick search in the
infocenter only mentions onbar... but please test.
I think this was discussed recently here in the mailing list.....
[.... test interval.....]
Ok... a quick test on 11.7 reveals bargroup applies only to onbar.
For ontape you must be a DBSA (belong to group informix by defaul, but a new
group should be created if that it the way to go).
This is not very consistent... should be fixed... but again, why do we still
have ontape?! :)
Regards.
--
Fernando Nunes
Portugal
http://informix-technology.blogspot.com
My email works... but I don't check it frequently...
--20cf3054a289c8c3220494ce19c7
Fernando you provide some good information.
Why continue with ontape?
We I find it extremely useful when loading database instances from one machine
to another much easier to restore than when using onbar. We back up our
instances to disk then backup to tape using file system backup. Our dbs are
small enough to allow this.
Also without ontape we would not be able to backup db at all!
The backup system that is in use by our organization uses comm vault8 and comm
vault 8 does not backup informix 11.5 despite it being out for over a year,
hard to believe but true!
Our backup management is outsourced. Commvault 9 is not due to be installed on
our site till next year sometime.
So that is a very good reason to have ontape available!