Re: Security and the ODBC

In article <34195A76.84551D8F@ana.med.uni-muenchen.de>, richard.spitz@ana.med.uni-muenchen.de wrote: > > > john@rl.is wrote: > > The only solution to this problem is to give only read access to the > > users and give the maintenance application it's own userid, e.g. > > "program". The application begins by connecting to the database with this > > userid and password (which users are unaware of). > > Good idea, but how can this be accomplished with 4GL 4.1? I've once > written an application that did exactly that, but that required > the program to be suid root and a little C function that did the > setuid() function call. I don't think it is such a good idea to > have all these programs sitting around which are suid root. Or > is there another solution how a program can connect with user-ID > and password unter 4GL 4.1 and ONLINE 5.07? If I remember correctly online 5 doesn't have a connect statement, so I think my suggestions don't apply there. Online 7 does have a connect statement which can be accessed with I4gl with a simple c function. The connect statement enables you to connect to the database as a different user without setuid(). ---------------------------------------------------------------------- John H. Frantz Power-4gl: Extending Informix-4gl frantz@centrum.is http://www.rl.is/~john/pow4gl.html -------------------==== Posted via Deja News ====----------------------- http://www.dejanews.com/ Search, Read, Post to Usenet