Re: ODBC Drivers !!!!!!!!!!!

This is totaly besides the point, but Richard Spitz allready commented on that very well. I'll only add that I find it rather important that Informix and people within informix now grasp what kind of problems their ODBC and other connectivity software create and can start thinking about solutions. If anyone from Informix is interested in more information they should feel free to call on me (e-mail or otherwise) at any time. I would love to help on these issues. I'll also see if I can find some time to take this up via the IIUG which may be a more appropriate channel than further discussions here at c.d.i. On Thu, 23 Apr 1998 10:57:17 +0200, Marco de Jong <marcodj@post.ie.informix.com> wrote: >I think this is the basic of DATABASE design:, granting an revoking connect, update ... >rights at database level for the different users etc. etc. > >Without ODBC you'll have the same problems with DBACCESS ! > >Secure your database at database level. > > >Regards > >Marco de Jong > > >Nils Myklebust wrote: > >> Yes, this is one quote from that white paper. >> First: It does explain ODBC in a better way than most other things I >> have seen on the web. >> Second: Here is another quote that is a little more central, although >> also OpenLink related: > >> The key here to us and many others is security as it relates to access >> control. >> If you have followed previous long descussions here at c.d.i. (which >> are hardly worth repeating) you know many people have found >> significant problems with using ODBC at all. If a user have access to >> one program that does direct updates to the database (even a 4GL or >> ESQL/C program running on a Unix server) that user can use the login >> name and password from that program when starting MS Access and get >> the same rights to update any table in the database. Appart from >> either using stored procedures exclusively for database updates or >> some very limited protection via roles there is no way of protecting >> against this with the Informix ODBC drivers. > Nils Myklebust NM Data AS Norway E-mail: Nils.Myklebust@nmdata.com FAQ at: http://www.iiug.org/techinfo/faq/faq_top.html (Now with ODBC info under "Third party products".)