× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



On 15-Jan-2016 07:03 -0700, rob wrote:
Is there some way to say that if an ODBC user connects to your system
they are only allowed to query data from one particular schema (aka
library)?

Due to a mess with security let's forego the thought of changing each
of the several hundred schemas to GRTOBJAUT ODBCUSER *EXCLUDE one at
a time.

Normally I'm a big fan of securing the data itself and not trying to
patch each of the several dozen ways one can access that data. This
is kind of an audit thing. I'd really rather not go down this tangent
and would rather focus on how I can limit this user to one schema via
ODBC.


Instead of granting *EXCLUDE to that specific user, why not grant *EXCLUDE to *PUBLIC for every library that should not be publicly available? Allow whatever is regarded as /public/ to be available to that user, who by default would be considered part of /public/, and merely /correct/ whatever libraries currently incorrectly allow for access publicly. Having changed Creation Authority (CRTAUT) for the library QSYS to be *EXCLUDE, any new libraries would default to the more secure setting.


As an Amazon Associate we earn from qualifying purchases.

This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.