RE: SQL and Data security

We handle this by having the programmers in debug mode w/update production
*no.  Then all of the files in the production libraries can be read but not
updated.  We can copy the data to our test libraries and play to our hearts
content before putting the programs or data altering utilities into the
production environment.  It is sometimes a hassle when there is a production
problem, but it's saved my bacon a quite a few times!

Jill

> -----Original Message-----
> From: owner-midrange-l@midrange.com
> [mailto:owner-midrange-l@midrange.com]On Behalf Of Richard Shealy
> Sent: Tuesday, October 24, 2000 11:35 PM
> To: MIDRANGE-L@midrange.com
> Subject: SQL and Data security
>
>
> During a pre-audit, a flag was raised about programmers have
> access to data
> altering utilities on the production AS400.  DFU, EDTF, DBU, WRKDBF, etc.
> are easy enough to restict.  However, the problem comes with SQL.
> How can a
> user be limited in the execution of SQL?  We need to be able to allow the
> programmers SQL SELECT, but prevent UPDATE or DELETE.  These rules should
> only be in place when SQL is executed from a command line, but allowed
> within RPG or CL programs since the application uses embedded SQL.  Any
> thoughts?
>
> Richard Shealy
>
>
> _________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> Share information about yourself, create your own public profile at
> http://profiles.msn.com.
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
>

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---