Re: Run 4GL Program without Database Permissions?
Posted in 1996
How about a stored procedure owned by a user that has the rights to the 2nd database, the procedure can be called by any user on the first database and executes with the rights of the procedure owner. Kind of a suid database script effect. The stored procedures are available in 5.01? and above. I have done this to drop tables owned by someone else, the procedure is owned by a user with dba privileges and is called by anyone. The users can only drop the specific table, no other dba privileges are granted. > >--- On 3 Sep 1996 14:02:05 GMT Richard Spitz <spitz@GANS2X.ana.med.uni-muenchen.de> wrote: > >Dear Informixers, > >please help me with the following problem: > >In our department, we have, among others, two groups of applications with >their own databases behind them: > > 1) Management of the operating room schedules > 2) Management of the pain therapy department > >So far, both have been used by completely distinct groups of users who have >nothing to do with each other, especially not with each other's databases. >There are about 25 users defined for database (1) and about 15 for (2). > >Now I need to write a program so that a user of the OR scheduling program >can automatically notify the pain dept. of a patient undergoing >postoperative pain therapy. This means that a user out of group (1) must >be able to invoke a 4GL program with write access to database (2). > >What I must avoid is having to grant these users any privileges for data- >base (2). This is rather awkward to handle in Online 5.0x and a lot of >work to keep up to date, since there are no "roles". > >When I experimented with the "s"-Bit, I got the error message: >dynamic linker: postop.4ge: can't find lib4gl.1 >Killed > >However, LD_LIBRARY_PATH is set correctly, and other 4GL programs without >the "s"-Bit set can be run without problems. What's wrong? > >Any suggestions about how my problem could be solved? > >Regards, Richard >-- >+----------------------------+-------------------------------------------+ >| Dr. Richard Spitz | INTERNET: spitz@ana.med.uni-muenchen.de | >| EDV-Gruppe Anaesthesie | Tel : +49-89-7095-3413 | >| Klinikum Grosshadern | FAX : +49-89-7095-8886 | >| 81366 Munich, Germany | | >+----------------------------+-------------------------------------------+ > > >-----------------End of Original Message----------------- >