Re: SQL and Data security

[Marco Facchinetti <facchinetti@xxxxxxxxx>]

I think you have to work on files (data) or columns aut's.
--- Richard Shealy <r_shealy@hotmail.com> wrote:
> During a pre-audit, a flag was raised about programmers
> have access to data 
> altering utilities on the production AS400.  DFU, EDTF,
> DBU, WRKDBF, etc. 
> are easy enough to restict.  However, the problem comes
> with SQL. How can a 
> user be limited in the execution of SQL?  We need to be
> able to allow the 
> programmers SQL SELECT, but prevent UPDATE or DELETE. 
> These rules should 
> only be in place when SQL is executed from a command
> line, but allowed 
> within RPG or CL programs since the application uses
> embedded SQL.  Any 
> thoughts?
> 
> Richard Shealy
> 
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Messenger - Talk while you surf!  It's FREE.
http://im.yahoo.com/
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---