"Create Database" Security Hole?
Red Valsen asked how to stop any user from running CREATE DATABASE on IDS 7.30.UC2 and 7.23.UC1 (Solaris). Art S. Kagel said the only way was denying the user login access to the server. Clifton M. Bean recalled an existing feature request or bug, and Chris Jenkins confirmed it was a recognised security issue slated for the release after 9.2 (IDS.2000).
Auto-generated by Claude from the posts below — may be imperfect; read the full thread.
Is there any way to prevent a user (ANY user) from executing "create database <databasename>"? We're using IDS7.30.UC2 & 7.23.UC1/Solaris 2.6/x86, but I'm sure this is a ubiquitous capability (security hole?) on all Informix DB products.
Red Valsen wrote: > > Is there any way to prevent a user (ANY user) from executing "create > database <databasename>"? We're using IDS7.30.UC2 & 7.23.UC1/Solaris > 2.6/x86, but I'm sure this is a ubiquitous capability (security hole?) > on all Informix DB products. Only by denying the user access to the server by denying login privilege. Art S. Kagel
There is a feature request or bug number (or both) assigned to this item; at least, I seem to remember this from my days in INFORMIX Technical Support. I just cannot remember the number assigned to it. Wonder if it will be part of the 9.2 product that is in beta testing at this time ... Red Valsen <red_valsen@yahoo.com> wrote in message news:37A1ABB1.A4367685@yahoo.com... > Is there any way to prevent a user (ANY user) from executing "create > database <databasename>"? We're using IDS7.30.UC2 & 7.23.UC1/Solaris > 2.6/x86, but I'm sure this is a ubiquitous capability (security hole?) > on all Informix DB products. >
Red, This is a recognised security issue. It is currently slated to be addressed in the next major release of IDS after 9.2 (IDS.2000). Chris Red Valsen wrote in message <37A1ABB1.A4367685@yahoo.com>... >Is there any way to prevent a user (ANY user) from executing "create >database <databasename>"? We're using IDS7.30.UC2 & 7.23.UC1/Solaris >2.6/x86, but I'm sure this is a ubiquitous capability (security hole?) >on all Informix DB products.