Re: Informix permissions (IDS 9.30)

Doug Lawry wrote: > You can manipulate system tables directly as "informix" [...] I'm not remotely convinced that's supported. It probably works, but you probably shouldn't do it. > "bobglass" <ssrmg1@yahoo.com> wrote: >>While reorganizing data in the database, we apply individual user >>permissions per person, per table to provide database security. The issue >>we have is anytime we drop and re-create the database, we have to apply >>all of the grants, in a recent restore it took 36 hours to apply the >>grants for 933 users to 899 tables (6 statements X 899 tables X 933 >>users). Is there a quicker way to apply the grants using onconfig >>parameters for tuning? Currently we open permissions up to public until >>the grants have been applied, then remove public. >> >>system parameters >>AIX 5.1 >>IDS 9.30/tools 7.30UC7 >>on a 4 way 8 gig IBM 690 As I commented on one of the IIUG mailing lists, you should do all 4 (not 6) statements per table in one shot, and you can do a thousand users at a time without causing trouble. I did GRANT SELECT, INSERT, DELETE, UPDATE ON SomeTable TO ...1000 usernames... in less than 2 seconds on a slow (old, 330 MHz) Sun UltraSparc 10, Solaris 8 and IDS 9.40. Multiply by 900 tables and you're talking less than half an hour if it scales linearly. You can probably do that in parallel too for greater speed. I think you claimed 36 hours in your original email - seems slow regardless. You might want to look at ALTER TABLE SysTabAuth NEXT SIZE X for a suitable size of X. -- Jonathan Leffler #include <disclaimer.h> Email: jleffler@earthlink.net, jleffler@us.ibm.com Guardian of DBD::Informix v2003.04 -- http://dbi.perl.org/