Re: preventing users from creating databases
Posted in 1997
Topics: Storage & Space Management, Server Administration, Security, Permissions & Auditing
On Thu, 23 Jan 1997, Rick Ward wrote: > William Dillinger wrote: > > > > Yes, that is exactly what I am saying. Not only that, but the root dbspace > > is the DEFAULT location, unless you specify otherwise in your SQL. Users > > On Fri, 17 Jan 1997, ic wrote: > > > > } Are you saying that users that do not belong to the "Informix" group > > } and are not the "informix" user can create databases in root dbspace??? > > } > Currently, the method we use to prevent developers/users creating databases in the root dbspace is > by telling them they can't, and must ask the DBA to create one for them. As long as we create > them when they want (which isn't too often), they seem happy. "Ignorance is bliss". Potentially > for the future we may consider a script to remove unauthorised databases overnight, however, I have > not had any issues with it so far. When I first became familiar with Informix I was also concerned > with this ability of users to create databases in the root dbs, but by "mis-informing" the user > community we have avoided any trouble ! (So far!). > I'm wondering if anyone is reading this thread and saying to themselves "I didn't know I could do that!". What they don't know won't hurt me! It probably won't cause an incident, and I can delete them faster than anyone can put them up. My real concern is the proliferation of database friendy PC apps that could allow users to create databses and they don't even know their doing it! I don't know of any that do that, but I don't keep up on the latest in the PC world. If they don't exist, I'm sure they will soon. In that way, the ignorance of the users COULD cause trouble for me. The problem could be solved if one could revoke update permission to the sysdbspartn table in sysmaster. But since that is not a REAL table, you can't. but, there is a lot about I don't know.