RE: QUSER on ODBC requests

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

> From: alan shore
>
> VERY good response.

Thanks, Alan.  One of the things my company does as part of a typical "web
enabling" exercise is to do a full security audit.  For many companies that
are going to the web, this is the first time they've ever had to deal with
"outside" security issues beyond user profiles and object authorities.  And
the unfortunate truth is that many "e-business" companies don't really have
a clue what data security is all about.  It's amazing how many companies
give their AS/400 a real world IP address, fire up all the servers, and
leave the machine wide open.  About the only thing you can do to worsen the
situation at that ponit is to then give out a user ID and profile,
especially if you haven't locked down your objects.

I'd go into detail on some horror stories, but I won't on the offchance that
some script kiddie is monitoring the list looking for a way to make our
lives more difficult.

Joe