RE: ODBC and Security
Posted in 1996
I have seen a number of items here regarding ODBC and Security. I think the problem is larger than ODBC when you are talking about client/sever apps. If you place NewEra on a PC do you not have to place I-NET on the PC in order to access the remote database? If you place I-NET on the PC can I not go buy an application like Delphi and proceed to modify your corporate data. Some suggestions have been made as to granting and revoking access to tables and columns. How do you deal with the situation where the 3rd party application provides security at the value level? That is to say that a particular user can only see rows in this table of the values meet certain criteria (i.e. the salary is < $50000). Informix provides no means for defining this type of security. It would also be nice if I-NET validated the application that is connecting as well as the user. Until a greater level of security is provided at the server level I am not sure there is a viable options for extremely security conscious individuals. It is my understanding that the Openlink ODBC driver does provide server based types of security but I am not familiar with this driver. Ray Kaminski Sr. Software Engineer Bi-Tech Software