Re: user & group permission

Mr Cheuk Kong Lo wrote: > > As part of the tightening security plan, I'm somewhat tempted to remove > most of our users from the informix group. Since we mostly use > r4gl, isql, 4gl debugger, it seems backend programs (fglgo blah) are run > ok, even user is not in the informix group. I thought you were joking at first. :-) > So who is really _need_ or _should_ be in the informix group? Development > people sound like the ones, but what if I also remove them from the group? Then I realised you weren't :-( The ONLY member of the group 'informix' should be the user 'informix'. By adding other users to this group, you open up a huge security hole. Users can bypass the privileges placed through SQL. And don't let people fob you off with the excuse that these users need to run the Informix utilites. The permissions for these files are set at install time. If they are not correct then re-install your software, or re-instate the permissions found in the $INFORMIXDIR/etc/*files files where *=productname. As far as I know this hasen't changed through the versions. If it has, can someone let me know? Thanks. ;-) Cheers, -- Mark. +------------------------------------------------------------------+ |Mark D. Stock - The West Solutions Group http://www.west.co.za | | The Informix FAQ is at http://www.iiug.org | |mailto:marks@west.co.za +-----------------------------------------+ |Tel: +27 11 803 2151 |If it doesn't work, force it! | |Fax: +27 11 803 2189 |If it breaks, it needed replacing anyway!| |Cell: +27 83 250 2325 |Well, that's how I code anyway! | +------------------------+-----------------------------------------+