ODBC & Client Access -Reply

Posted in 1996

Peter Tashkoff — 17 Jul 1996 22:43:21 -0400 — source: Informix-list mailing list archive (1991-1998)

Mike (Ray?) Roles are implemented in version 7.11 (I think) of Informix. They weren't there in 7.10 and they're there in 7.12. I have forgotten my 5.0 but in 7 you can grant connect, resource or dba priviledges to users which manage the connection. Can you do this in 5? Alternatively you can ditch your odbc driver and go with one which has a security component to it. This isn't perfect but it will give you some measure of control. I know I sound like an Openlink groupie at times but Openlink does have such a component. ( I am sure that there are other drivers as well. i just don't know about them.) HTH -- -- Peter Tashkoff NZ Kiwifruit Project Consultant/DBA Marketing Board. Standard Disclaimers apply This posting may not be used by any commercial organisation to vilify another. >>> Ray Riley <weho-isd@ci.west-hollywood.ca.us> 17/July/1996 11:41am >>> Does anybody have an answer for ODBC client security? Once you open up ODBC to users, how do you keep them from modifying tables without the benefit of applications enforcing the database integrity? Ideally, I should be able to monitor who connects via ODBC and control access to the databases and tables without having to get involved with lots of messy grants and revokes. I've read on this Newsgroup somebody mentioning a product/technique called "Roles," but I haven't been able to find any reference to it elsewhere, but it is supposed to help manage grants etc. Has anyone heard of, or have any info on this? I researched SPLs and triggers, but there doesn't seem to be a trigger event for users connecting to the database. I could enforce access to be read-only if I were to trap Insert Updates and Deletes, but I would really like to be able to monitor connections to the database as well. All this runs under INFORMIX Online 5.x and Intersolv's DataDirect SequeLink. Any help would be appreciated on this issue, post or direct e-mail. Much thanks, Mike Sullivan PS: If anyone has heard of the read-only switch in SequeLink's .ini file, it has a bug; it does not work.