Public execute on filetoclob and other functions
Posted in 2016
FLIP VAN — — source: IIUG Forums & Mailing Lists
Informix 11.7FC8 Our auditors did an audit on our Informix databases using the SQuirrel tool. Following is the finding and solution recommended by this tool. " database sysmaster - Public can execute the filetoclob function. It is suggested that a role called FileAccess be created and the execute permission for this routine be assigned to this role. Users that, as a strict business requirement, need access to this routine should be made members of this role. Once done, revoke the execute permission from public. " I am not sure if we should make these changes in the Sysmaster database and if creating a role in the sysmaster database is the best way to resolve this finding. Your views will be very much appreciated. Thanks