Still no luck with permissions, and GRANT/REVOKE

Path: emory!wupost!cs.utexas.edu!utgpu!watserv1!watmath!plg.waterloo.edu!dvadura From: dvadura@plg.uwaterloo.ca (Dennis Vadura) Newsgroups: comp.databases.informix Message-ID: <1992Jan22.204806.11926@watmath.waterloo.edu> Date: 22 Jan 92 20:48:06 GMT Sender: news@watmath.waterloo.edu (News Owner) Organization: Computer Science Dept., University of Waterloo Originator: dvadura@plg.waterloo.edu Ok, perhaps someone can help me here. I am still stuck with correctly setting up access perms for my database. I have a Sun IPX, with version 4.10.UC1 of the engine, and version 4.00.UH1 of the compiler. What I want is to have several users access the database without having to set their effective user id's to that of the owner of the database files. I thought that the whole purpose of grant/revoke was to allow this to be the case. Suppose I have the following: MODE ANSI database in /u/database/live DBPATH set to /u/database/live permissions on the directories are as follows: path: owner: perm: /u/database/live informix 750 /u/database informix 750 /u root 755 Three users joe, fred, jane with respective home directories in /u/joe, /u/fred, /u/jane. I think this is wrong according to what informix claims to want, but, if I set all perms to 755, and change ownership of /u to informix it still fails to allow joe, fred, or jane to read the database. The 4gl program that is invoked is owned by informix and has perms 755. Each user has been given grant connect priviledges, and each user has been given delete,insert,update,select permissions on each table in the database explicitly (as required for mode ANSI databases). The status codes returned by the grant statements return 0. So things should be working. When a user brings up the application all querries fail. I'm stumped. (ie. I can hack together anything to make this work smoothly but I need to know what informix is expecting, at this point I've tried all reasonable things and even some dumb ones. All suggestions are welcome). hmm, actually, does the application program, need to have setuid and setgid bits turned on? If so this is not in the books that I had a look through last night. -thanks -dennis P.S> I have managed to cause the compiler to dump core several times now and will post specifics when I get a chance to build small examples that fail. A compiler that dumps core (albeit on invalid input) is very, very, unprofessional. -- ------------------------------------------------------------------------------- If it bleeds then we can kill it. |Dennis Vadura -- Aaaarnold |dvadura@plg.uwaterloo.ca ===============================================================================