Re: PC tool to access 400 data

[PaulMmn <PaulMmn@xxxxxxxxxxxxx>]

Exactly.  ODBC is an open pipeline to your data.  Unless you control the
files and fields a user can see (via an LF with fewer fields and the proper
authority), your user can change those extra fields...  Need a pay raise?

That's why you change authority:  Users can look but don't touch, and the
programs that update the data adopt sufficient authority to do the work.

--Paul E Musselman
PaulMmn@ix.netcom.com

-=-=-=-=-=-=-=-=-=-=-=-

>I am assuming that too.
>
>But now, what about this scenario:  A user has change authority to a file
>and has programs on the Client Access menu where he/she can change
>displayed fields like name & address from, oh, say, payroll.  Does this
>mean that now he/she could become an ODBC expert and go in that file and
>change other fields that are not normally displayed to him/her?  I am
>thinking of payroll header files where often times pay rate, y-t-d, q and
>q-t-d totals are kept.  Or Accounts Receivable header files where credit
>limits are kept.  or...
>
>
>
>In <v03130307b1e8e2931286@[10.1.1.2]>, on 08/01/98
>   at 11:20 AM, PaulMmn <PaulMmn@ix.netcom.com> said:
>
>>Evidently the user had the needed authority.  Whether or not that was the
>>-desired- authority is another issue.  (:
>
>>--Paul E Musselman
>>PaulMmn@ix.netcom.com
>
>
>
>>>*choke*  with or without needed authority?
>>>
>
>--
>-----------------------------------------------------------
>boothm@ibm.net
>Booth Martin



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---