Re: Question on use of CLI and table privileges

A little late, but fortunately there is a simple solution: Forget about the Informix-CLI product wich have a seriously flawed security system as you have discovered. It's an essentially useless product for the purposes you want to use it (and as so many others are now finding out). Go to http://www.openlinksw.com and download their ODBC drivers for a trial. (The server based version, not the "Lite" version.) With them you can easily set access priviledges on the server in a simple control file. You can set everyone to read only if you want, or allow other access based on user name, tcp/ip adress, machine name or application. It's real easy to set up and maintain and it works very reliably and fast. Make sure you read their ODBC whitepaper awailable on their web site. I am not affiliated with Openlink, simply a happy customer. thorner@hboc.com wrote: :Got a question about CLI and user access privileges - hope someone can :help... : :Background: : :Users have ID's on UNIX box with Informix 5.04 online engine and have RW :privileges for all tables ("public"). They access the data with an :accounting system written in 4GL using a character based front-end. :Users want ODBC access to the database on their PC's, using the :Informix-CLI product. They want to use this to look at the data with :spreadsheets and other products such as Crystal Reports. : :Problem: : :Need to restrict user access when using ODBC to read-only, since this is :an accounting system and the auditors demand that all updates be done :through the 4GL front end. Any ideas on how I can restrict ODBC access :to RO, while maintaining the RW privilege for 4GL users? : :Other Information: : :There are 600 tables and 6000 users on this system. The idea I have come :up with so far is to restrict ODBC access using /etc/hosts.equiv to a few :users. Give these users RO access, and keep all other users at RW access. :However, this means setting specific tables access privileges for all :users for all tables, a maintenance nightmare at best. : :Any other ideas are most welcome. Thanks in advance!! : :Tom Horner :-- :Informix DBA :HBO and Company :Atlanta, GA : :-------------------==== Posted via Deja News ====----------------------- : http://www.dejanews.com/ Search, Read, Post to Usenet Nils.Myklebust@idg.no NM Data AS, P.O.Box 9090 Gronland, N-0133 Oslo, Norway My opinions are those of my company The Informix FAQ is at http://www.iiug.org