RE: Creating users
vfraenkle wrote:
---------->
>De: vfraenkle@aol.com[SMTP:vfraenkle@aol.com]
>Enviado: mi=E9rcoles 22 de enero de 1997 22:58
>Para: informix-list@rmy.emory.edu
>Asunto: Re: Creating users
>Hy Amita,
>the easiest way to grant dba rights is the following statements:
> grant dba to public;
I do not agree with this, because that would be a violation of=20
security rules provided by INFORMIX. Anyway, Amita was asking
for a way on how to grant or revoke user privileges, and was not=20
asking how to let everybody in the world access the database.
>if you can secure, that no one reach tools with wich they can modify =
the
>databases (e. g. dbaccess), then you have no problems with adding new
>users (UNIX only). Otherwise your problem may be, that you will forget =
to
>set the correct access rights for a user and the application you work
>with, will fail. And some applications I know, do not correctly act =
after
>a access error.
Not true again, first, adding unix users is not related on how =
someone
will access the database, second, there are many ways to access
an informix database, So I really do not understand your point =
when
you say "grant all permissions to EVERYBODY" and "Restrict
permissions on tools to EVERYBODY", I think you will confuse the
one who sent the original POST.
The Database Administrator will have to deal with privileges, if =
he/she
forget something, then it will be his/her problem, but that does =
not mean
he/se will have to make it in a different way. Anyway I really do =
not=20
understand Why people is working as a DBA without knowing this
kind of obvious subjects.
INFORMIX manages Database Level, Table Level & Column Level
privileges, so you may first know the Security Access Diagram and
then apply the instructions to the Database Server.
Regards,
=20
-------------------------------------------------------------------------=
-------------
Mario Estrada / SISTECO,S.A.
INFORMIX, /Phone (502) 3318116
Support Department /Fax (502) 3348447
-------------------------------------------------------------------------=
------------
The opinions expressed here, are not those of my company
-------------------------------------------------------------------------=
-------------