Re: Security Exit point monitoring

Evan,

AFAIK, the EXCEL plug-in uses ODBC. That said, check out he code for
ODBCLOG, which you can find here:

http://www.rpgiv.org/ODBCLOG.htm

<http://www.rpgiv.org/ODBCLOG.htm>It can give you some ideas about how the
exit point is managed.

Regards,


Luis Rodriguez
IBM Certified Systems Expert — eServer i5 iSeries


On Wed, May 26, 2010 at 7:17 PM, Evan Harris <auctionitis@xxxxxxxxx> wrote:

Hi guys

I am talking to someone about exit point monitoring to further lock
down their box. The situation is they have a green screen application
that expects users to operate with elevated rights. At the same time
they recognise that there is a potential risk when those users are
using other tools (ODBC, FTP, Access, Excel, etc) to access the
database directly.

I understand that I can do things like make a users access read only
when the access is requested for example via an ODBC connection, but
my question is how granular the monitoring capability is. For example,
can I manage requests for the Excel plug-in and ODBC access separately
? What about the Excel Plug in vs OLE-DB ?

I guess I just want to understand how granular the access control can
be using the exit points and a security product.

Vendors, if appropriate, feel free to email me directly, with
information about the kind of access control your product provides, or
just point me at a page with the relevant detail.

--
Regards
Evan Harris
http://www.auctionitis.co.nz
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.