Re: Restricting ODBC access

Eric R. Gavin wrote: > Uh, I'm not sure what the problem is, but the ODBC driver that I use > asks me for a password. Of course it does. The problem is that "normal" users use that login and password to log into a UNIX machine, where they directly enter an application that communicates with the database. No shell access, no SQL or other direct database access. However, nothing prevents one of these users to install Informix-CLI or another I-Net based ODBC driver on any PC and use their UNIX login and password to directly access the database. Ouch! > Informix has built-in security in it's roles and priveleges. What's > the problem? Roles are not available in version 5.x of the engines. So database privileges have to be allocated on a per-user basis, and can be abused in the above described manner. Regards, Richard -- +--------------------------+------------------------------------------+ | Dr. Richard Spitz | INTERNET: spitz@ana.med.uni-muenchen.de | | EDV-Gruppe Anaesthesie | Tel : +49-89-7095-3413 | | Klinikum Grosshadern | FAX : +49-89-7095-8886 | | 81366 Munich, Germany | GSM : +49-172-8933578 | +--------------------------+------------------------------------------+