How to control informix user access the user data

Posted in 2011

Summary

CHUAN LU asked how to control the informix user's access to user data. Art Kagel only asked what was meant. Jonathan Leffler asked if it was about stopping privileged users reading data while still administering. CHUAN LU agreed and relayed an answer: configure role separation so the DBSA role administers the instance without data access.

Auto-generated by Claude from the posts below — may be imperfect; read the full thread.

Topics: General Discussion

CHUAN LU — Sat, 26 Nov 2011 02:42:46 — source: IIUG Forums & Mailing Lists

Hi, How to control informix user access the user data?

↪ replying to CHUAN LU

Art Kagel — Sat, 26 Nov 2011 22:42:24 — source: IIUG Forums & Mailing Lists

?? Art Art S. Kagel Advanced DataTools (www.advancedatatools.com) Blog: http://informix-myview.blogspot.com/ Disclaimer: Please keep in mind that my own opinions are my own opinions and do not reflect on my employer, Advanced DataTools, the IIUG, nor any other organization with which I am associated either explicitly, implicitly, or by inference. Neither do those opinions reflect those of other individuals affiliated with any entity with which I am affiliated nor those of the entities themselves. On Fri, Nov 25, 2011 at 9:42 PM, CHUAN LU <luchuan@cn.ibm.com> wrote: > Hi, > How to control informix user access the user data? > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > --14dae9340e698867cb04b2aafb66

↪ replying to CHUAN LU

Jonathan — Sun, 27 Nov 2011 18:27:37 — source: IIUG Forums & Mailing Lists

On Fri, Nov 25, 2011 at 18:42, CHUAN LU <luchuan@cn.ibm.com> wrote: > How to control informix user access the user data? > Is this a question about how to control which data privileged users can access in a database? Thus, for example, do you want to prevent user informix from being able to select data from the customer data tables, while still allowing userinformix to do the administrative work that is necessary (such as archiving data, or running exports of the database, etc)? -- Jonathan Leffler <jonathan.leffler@gmail.com> #include <disclaimer.h> Guardian of DBD::Informix - v2011.0612 - http://dbi.perl.org "Blessed are we who can laugh at ourselves, for we shall never cease to be amused." --e89a8f50282a333fd904b2bb8a5b

↪ replying to Jonathan

CHUAN LU — Mon, 28 Nov 2011 02:29:04 — source: IIUG Forums & Mailing Lists

Jonathan, You are corrent. I got below answers frmo others, if you have more good idea, I want to listen also. ------------------------------------------------ - If you configure your instance for role separation you can administer the instance without being Informix. The DBSA role will be able to start/stop/monitor the instance and by default the users in this role will not have access to user data. So, in this scenario you can disallow the informix user to connect.