RE: User Privileges for IFAS Database Using SQL

Bill -=20 I would be interested in getting copies of these programs. At = Fairbanks North Star Borough, we do something similar to Alamenda County = but I would like to be able to use the nucleus security to give more = access to users using third party products. Thank you for sharing these = with us. =20 Jane Vohden Database Administrator Fairbanks North Star Borough Jvohden@co.fairbanks.ak.us 907-459-1477 ----------------------------------------- ---------- From: bill.haight@INTERNET_SMTP.ci.slc.ut.us Sent: Friday, October 24, 1997 12:50 PM To: Multiple recipients of list Subject: RE: User Privileges for IFAS Database Using SQL Salt Lake City has take a slightly different tact. Because the = information I the IFAS database is public information it is available to all. The only = expceptions are HR and Payroll tables. Those are restricted to users with a need to = know. We have written an informix 4gl program that looks at nucleus job running capabilities and grants privileges according to whether the has access = to HR and PY. The programs are available to user group members for the asking. Bill Haight Salt Lake City -----Original Message----- From: bitech-l@mail.messiah.edu at internet Sent: Friday, October 24, 1997 2:52 PM To: bitech-l@mail.messiah.edu at Internet Subject: RE: User Privileges for IFAS Database Using SQL We at the Alameda County Office of Education concur with the message from the University of Dayton regarding the dangers in allowing users to have access to sql. Our office has taken the following approach to this situation. Rather than giving users direct access to sql via the command line, we instead only allow them access via IFAS, CDD, Insight, and other products that work through the existing Nucleus security. If we need to give a user some type of sql access, we write UNIX scripts that run INFORMIX sql statements that we in the MIS department have written. The user then can run the script from within IFAS by entering the script name preceded by a colon. This way, we can limit what users can do to the database. I think that most users really do not have the time or interest to learn all about sql and the IFAS tables idiosyncrasies. Gary M. Rose Director of Data Processing Alameda County Office of Education gary_rose=3D40alameda-coe.k12.ca.us =3D20 =3D0A