Re: Commands for Limited Users

Rob:

I continue to find it surprising when I encounter any shop that actively
develops their own software and doesn't have a well-defined DBA role.
Even if you purchased all your applications, you should still have a
person who is responsible for the database. 

There's too much invested in your organization's data not to have at
least one person responsible for it. There are too many ways to mess up
access to your database and the availability to the data for database
management not to be tightly controlled. 

Phil Ashe
NetIQ (A division of Attachmate)
1233 West Loop South, Suite 1800 | Houston, TX 77027 USA
713.418.5279 phone
phil.ashe@xxxxxxxxxxxxxx
www.netiq.com 

-----Original Message-----
From: security400-bounces@xxxxxxxxxxxx
[mailto:security400-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Thursday, September 07, 2006 12:22 PM
To: Security Administration on the AS400 / iSeries
Subject: Re: [Security400] Commands for Limited Users

Also, regarding respecting the integrity of data files.  This is where a
lot of people who do not think that the i5 requires a dba fall flat on
their face.  There is much more that should be done at the database
level to ensure that people can't muck it up through back doors.
Frankly it's the very limited few who have *ALLOBJ that are more likely
to think they know what they are doing and screw up the data.  Like the
systems person who's just going to run that quick sql to fix some data.
And, oops, 10,000+ rows are fubared.  What is needed is more usage of
constraints and triggers.

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com