RE: GUI alternative to IBM Query

I'm not sure what exactly Chuck is referring to, but without the proper use
of exit programs, ODBC in general is a huge hole in security.  And as you
know, writing such an exit program is no piece of cake, especially if you're
trying to give fine-grained access at the column and/or row level.

ODBC access is a nightmare waiting to happen, which is why I prefer server
programs.  There is no simple way to secure against ODBC other than
disabling it, and anything that gives even reasonable security is going to
cost money.

Joe

From: qsrvbas@xxxxxxxxxxxx

  5. GUI alternative to IBM Query (Chuck Lewis)

We had someone show our CFO how to do some stuff with Microsoft's query

tool

and the ODBC drive from Client Access and it appears to have absolutely

NO

security what-so-ever and I see all kinds of problems with rolling that

out.

Chuck:

I'm not clear what you mean when you say "it" has no security.

Are you saying that the tool can get past the object-level security of
OS/400? Or is it that your AS/400 is not yet secured against network
access, i.e., your security is 'menu based' or similar in structure?