Re: AS400 ODBC Security

[jmoreno@xxxxxxxxxxxxxxxx]

There is no 100% solution for your needs 

However consider the following

Have a security plan

Setup your system security level
Identify profiles, group profiles, current user profiles and tasks that 
will access your data
Secure System Libraries, 
Secure Application libraries
If possible give *READ authority only to those remote *USERS and tasks

For ODBC/JDBC access control (using the IBM default database drivers)
Consider using the DB2 SQL exit points to check for SQL statements like 
UPDATE, INSERT, DELETE (at record level).
 Other statements to consider should be DROP TABLE, ALTER TABLE, .. In the 
exit points recognize the request and aprove/deny access 
For more information see the command WRKREGINF and look for the following 
entries
QIBM_QZDA_SQL1        ZDAQ0100     *YES     Database Server - SQL access 
QIBM_QZDA_SQL2        ZDAQ0200     *YES     Database Server - SQL access 
Modify the one that you will like to use
There is abundant documentation online with examples

I hope this helps 


Jorge Moreno
Overseas Military Car Sales
Woodbury, New York

Confidentiality Notice:This email, including its attachments, may contain 
information that is confidential and may be protected by federal and/or 
state laws and regulations, or other confidentiality privileges.  This 
email, including its attachments, may contain non-public information; 
therefore it is intended to be conveyed only to the designated 
recipient(s).  If you are not an intended recipient, please delete this 
email, including its attachments, and notify the sender.  The unauthorized 
use, dissemination, distribution or reproduction of this email, including 
its attachments, is prohibited and may be unlawful. 




"Erin Botkin" <EBotkin@xxxxxxxxxxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
05/05/2005 11:11 AM
Please respond to Midrange Systems Technical Discussion
 
        To:     <midrange-l@xxxxxxxxxxxx>
        cc: 
        Subject:        AS400 ODBC Security


Does anyone allow users to access AS400 from the internet?  How do you
secure the AS400 data for the ODBC connection.

Erin K. Botkin
Application Analyst
Spotsylvania County
Information Services
PHN: 540-582-7055 ext. 232
FAX:  540-582-9840

ebotkin@xxxxxxxxxxxxxxxxxx
-- 

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.