Re: ODBC traffic

Somehow you guys think I'm disagreeing with you. I'm not, just pointing it
out as an option.

As this being an option, and you don't want the user to change the
connection or add a new connection, etc. The network team (or people in
charge of windows) can set up group rules to keep the users out of
administration tools. This goes for ODBC connections, DNS-less connections,
etc (maybe not JDBC connections).

So again, the option isn't totally invalid. It's just a different way of
doing it. Different point of view.

On Wed, Apr 13, 2016 at 8:41 AM, Mark Murphy/STAR BASE Consulting Inc. <
mmurphy@xxxxxxxxxxxxxxx> wrote:

Particularly when it is so easy to defeat without anyone knowing about it.

Mark Murphy
STAR BASE Consulting, Inc.
mmurphy@xxxxxxxxxxxxxxx


-----Michael Schutte <mschutte369@xxxxxxxxx> wrote: -----
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
From: Michael Schutte <mschutte369@xxxxxxxxx>
Date: 04/13/2016 08:26AM
Subject: Re: ODBC traffic


Then you fire them. It was just an option. In all seriousness who in their
right mind would want to go around to all company pcs and make that change.

On Wed, Apr 13, 2016 at 7:43 AM, Mark Murphy/STAR BASE Consulting Inc. <
mmurphy@xxxxxxxxxxxxxxx> wrote:

Until the user googles it and finds that option and unchecks it.

Mark Murphy
STAR BASE Consulting, Inc.
mmurphy@xxxxxxxxxxxxxxx


-----Michael Schutte <mschutte369@xxxxxxxxx> wrote: -----
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
From: Michael Schutte <mschutte369@xxxxxxxxx>
Date: 04/12/2016 05:09PM
Subject: Re: ODBC traffic


In the windows ODBC connection, find the option that says "SELECT"
statements only. This would be a by user basis.

On Tue, Apr 12, 2016 at 3:44 PM, Charles Wilt <charles.wilt@xxxxxxxxx>
wrote:

The only way to do this would be on the IBM i side.

Either
1) Using object security, make sure the users only have *USE authority

the

data.
2) Spend $$$ for a package of exit point programs to lock down what's
allowed.
3) roll-your-own #2

An example of #2
http://www.helpsystems.com/powertech/products/network-security



On Tue, Apr 12, 2016 at 3:16 PM, Hoteltravelfundotcom <
hoteltravelfun@xxxxxxxxx> wrote:

HI We have some users who use ODBC connection in Excel to look at IBS

data

on the IBM i.

Now I am getting more requests for this.

I never liked this. Now I want to ensure that this can be one way

traffic

only (read only). How can I ensure this. Secondly, I noticed that all

users

with green screen get icons of the Windows for IBM ISeries access. In

these

Icons are also links for sending and receiving data with IBM i.

I don't like this either. We have a few users on green although most

not.

Can I remove these icons globally? Or has to be one by one.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.