RE: Exit Point Question/profile switching...

["Hatzenbeler, Tim" <thatzenbeler@xxxxxxxxxxxxx>]

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
--
[ Picked text/plain from multipart/alternative ]
exactly, and that's why I don't even want to attempt this approach...

tim

> -----Original Message-----
> From: thomas@inorbit.com [SMTP:thomas@inorbit.com]
> Sent: Monday, April 15, 2002 6:56 PM
> To:   midrange-l@midrange.com
> Subject:      RE: Exit Point Question/profile switching...
>
> On Fri, 12 April 2002, "Hatzenbeler, Tim" wrote
>
> > I didn't want to scan through a possible 32k sql string looking
> for
> > libraries I didn't want to allow, so I figured switching the
> authority would
> > be better and faster.... And more secure...
>
> And scanning SQL statements requires _parsing_ the SQL. Embedded
> comments, quoted literals, sub-selects... any of these could
> contain character strings that matched a restricted library or
> object name. The pitfalls are many and performance can drop
> significantly.
>
> This is an area that requires great care.
>
> Tom Liotta
>
> --
> Tom Liotta
> The PowerTech Group, Inc.
> 19426 68th Avenue South
> Kent, WA 98032
> Phone  253-872-7788
> Fax  253-872-7904
> http://www.400Security.com
> ___________________________________________________
> The ALL NEW CS2000 from CompuServe
>  Better!  Faster! More Powerful!
>  250 FREE hours! Sign-on Now!
>  http://www.compuserve.com/trycsrv/cs2000/webmail/
>
>
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.