Re: Control of database updates for Sarbanes-Oxley

Restricting use of STRSQL would not affect embedded SQL commands.  . If 
you still want to give your developers the ability to use SQL (at times I 
find it to be more useful than Query 400),  look into the STRQM command. 
It allows developers to create / test  their SQL but has security settings 
to prevent use of specific SQL functions, like update, insert, delete, 
etc. 

Dave Barry
Programming Manager
Dawn Food Products, Inc.
(517) 780-4354




DThomas@xxxxxxxxxxxxxxxx
Sent by: system21-bounces@xxxxxxxxxxxx
06/06/2006 03:54 PM
Please respond to
System 21 Users <system21@xxxxxxxxxxxx>


To
SYSTEM21@xxxxxxxxxxxx
cc
mdearmond@xxxxxxxxxxxxxxxx, bharper@xxxxxxxxxxxxxxxx
Subject
[SYSTEM21] Control of database updates for Sarbanes-Oxley






We are interested in restricting database updates outside System 21
applications.  Our thoughts are to limit these changes (which should be
rare) to DBU and use the DBU auditing utility.  We wish to prevent use of
interactive SQL (STRSQL) and DFU.  I'm looking for feedback from other
companies that have gone through the same issue.  Also, would restricting
use of STRSQL affect embedded SQL statements in System 21 RPG programs?

 

Dan Thomas 
Vice President
RxCrossroads 
4500 Progress Blvd
Louisville, KY  40218-3420
Office Direct (502) 318-1208 
Cell (502) 931-3736 
Fax (502) 318-1128 

 

 



This information transmitted is intended only for the person or entity to 
which it is addressed and may contain confidential and/or privileged 
material, the disclosure of which is governed by applicable law.  Any 
review, retransmission, dissemination or other use of, or taking of any 
action in reliance upon, this information by persons or entities other 
than the intended recipient is prohibited.  If you received this in error, 
please contact me and destroy the materials contained in this message.


_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list
To post a message email: SYSTEM21@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/system21.