Informix 7.12: Stored Procs vs Roles
Posted in 1996
Topics: Stored Procedures & SPL, Security, Permissions & Auditing
We are using PowerBuilder 5 for our development tool. However, the Director of our Data Architecture group is toying with the idea that to ensure database integrity ALL access to the database must be done via stored procedures. I am trying to convince him that action will cause loss of productivity on the development side of the house (since PB's data window has a good Update function) and that we could do the same thing using Informix's ROLE ability. Every use would be granted minimal access rights from their login and each application would then set their role for the duration of the application session to whatever role gives them the access rights needed. This way we could get the best of both worlds: data integrity and faster development. I was just wondering what others thought of this. Is there something I'm missing that stored procs would be a better way to go? BTW - I do know that it is possible to intercept the datawindow update in the sqlpreview event and call a stored procedure instead. I was hoping to avoid as much additional coding as possible! Phil Yandel | "I believe that life is 10% what happens Sr Application Developer | to me and 90% how I react to it." Amercian Medical Association | - Chuck Swindoll phil_yandel@ama-assn.org | All opinions are my own... PhilCYa@aol.com | ...no one else wants them