Re: ODBC and Security

At 01:41 PM 3/3/96 -0500, Lester Knutsen wrote: >Another option for the extremely security conscious is Online/Secure. >There are trade-offs with security, and implementing a security conscious >system does take more planning and work. There are also security issues >with ODBC and client server that need to be resolved. We are going to have to do this soon and, to be honest, have given it minimal thought so far. However, our theory is to have two users set up on Unix/Informix with the following characteristics: User Password Access To Access Type ---- --------- ---------- ------------ App Hard-Coded Everything Read/Write Enquiry Wide-Open Everything except Users Read Only Here, the application (which has it's own security based on the table called "Users") has free access to everything. The password is encrypted and held in the application. We would also have an enquiry-only user-id which could read everything except the "Users" table. This would be read-only. I am assuming that we can get this level of security via GRANT and REVOKE. Thoughts? Skot. -- ============================================================================ Scott Leckie ###### Technical Director # # ##### #### #### # # #### PROSYS # # # # # # # # # # 15 Royal Crescent ###### # # # # #### # #### Glasgow, UK # ##### # # # # # G3 7SL # # # # # # # # # # Tel: (+44) 141 332 9980 # # # #### #### # #### Fax: (+44) 141 332 2991 Mob: (UK) 0421 597764 *********************************************** ============================================================================