SEO

Art,
If he took the network connections out... i.e. no entry in sqlhosts and
no nettype entry... .would that shut it down?... Then only shm
connections allowed.... ? If DB on different server than app?

Thanks,
Norma Jean


-----Original Message-----
From: owner-informix-list@iiug.org [mailtowner-informix-list@iiug.org]
On Behalf Of Art S. Kagel
Sent: Tuesday, November 09, 2004 7:53 AM
To: informix-list@iiug.org
Subject: Re: No ODBC access to Informix...

On Tue, 09 Nov 2004 05:03:31 -0500, Wolf wrote:

A listener in IDS is just a thread in the engine so there's no way to
replace it with one that only allows read-access.

Art S. Kagel

> Yeeeeha!!!!
>
> Peng, peng!!!
>
> <G>
>
> I totally agree to this Art - only - the ERP is there and it works the

> way it works... i.e. the users log on to the DB using their! uid - and

> therefore have to have the rights they have.....
>
> So - also to the others that posted - I do not see a solution -
> "hiding" a database is no solution - we have to mitigate the risk of a

> user changing the data outside the ERP.....
>
> Again - please does anybody have an idea how to block ODBC access to a

> Solaris based Informix *** at all *** - i.e. I do not want to allow
> _ANY_ ODBC calls to be coming in to this box - somehow configuring a
> "listener" - if there is such thing in Informix......
>
> Regards
> Wolf
>
> "Art S. Kagel" <kagel@bloomberg.net> wrote in message
> news:<pan.2004.11.08.15.48.49.861051.1355@bloomber g.net>...
>> On Mon, 08 Nov 2004 14:00:45 -0500, Bill Dare wrote:
>>
>> WAIT just one minute there cowboy! Why not just disable the user's
>> update/insert/delete permissions on the database itself! The
'business'
>> app can log into the database on the users' behalf using a different
>> ID which is priveleged to modify the data. If doing that with a
>> single login for all, then create another small read-only database
>> that maps real user-id and password to a unique alter-ego user-id
>> which will be used to connect to the DB server.
>>
>> Art S. Kagel
>>
>> >> I do not know Informix - but from my understanding there must be a

>> >> way to totally disable ODBC access towards this database. I know a

>> >> little about DB2 and Oracle and from there I have the following
picture:

-----------------------------------------
================================================== ========== The
information contained in this message may be privileged and confidential
and protected from disclosure. If the reader of this message is not the
intended recipient, or an employee or agent responsible for delivering
this message to the intended recipient, you are hereby notified that any
reproduction, dissemination or distribution of this communication is
strictly prohibited. If you have received this communication in error,
please notify us immediately by replying to the message and deleting it
from your computer. Thank you. Tellabs
================================================== ==========


sending to informix-list