Re: Increase Security
Posted in 1995
The best approach to me: "GRANT CONNECT to PUBLIC" and then GRANT SELECT on table-xyz to PUBLIC for all tables. This will allow anyone to read data. Only the users who need to update data need INSERT or UPDATE. Those who need to create tables need RESOURCE to the data base vs CONNECT. Those who are DBA should be the only one's with DBA authority. On 24 Oct 1995, Brian O'Leary wrote: } Our database is Informix sql 3.2 running on SCO 3.2.2 } } The database and all tables are currently set to "GRANT DBA to PUBLIC" } and has been fine when adding new users especially as they are } restricted by menu access to 4gl programs. I am currently opening up the } systems to make use of mail and shell programs for all users, but I am } concerned that the databases could be left open to meddling and } corruption. } } What is the best way to open the system, keep the flexibility for new } user additions but maintain security for the database. } } Any ideas greatly accepted. } } Brian O'Leary e-mail boleary@dircon.co.uk } } Learning without thought is labour lost; thought without learning is } perilous. } }