Re: ACE and SET ROLE
Posted in 1998
Topics: Stored Procedures & SPL, Server Administration, Security, Permissions & Auditing
ACE and ISQL will use whatever the default role is for the user. In our application, we only care about changes to the data so we create a default role with primarily read access and grant that role to "public" -d Peter Ede wrote in message <34E07EA6.1E89@uk.ibmmail.com>... >Hi. > >We have a 7.22uc1 Online DSA database and we have a need for high levels >of security. Extensive use of Stored Procedures have been deployed to >cater for data access/changes within the application. Table privileges >are allocated to ROLES, the application using SET ROLE where required. > >Now we need to provide ad hoc reporting facilities. The Informix report >writer ACE was written many moons before ROLES where introduced (to >Informix), so what's the alternative ? > >If we use ACE we could separate the SQL from the report: by using >ISQL/DBACCESS, SET ROLE and SELECT ... into an ascii file. Then use ACE >with a READ statement. Not very elegant. > >Has anyone else run into this problem ? Any solutions ? >Any other report writers that understand ROLES ? > >Regards >Peter Ede >IBM UK. ><No name - no pack drill>