Re: Controlling ODBC access

[Charles Wilt <charles.wilt@xxxxxxxxx>]

100% agree with Rob...

You can prevent all access via ODBC/JDBC

But you're fooling yourself if you think that you can limit access to only
certain tools, especially if those tools sign on with the users actual
credentials..

If the tools sign on with a unique user ID, it might work.

But rather than playing wack-a-mole, you'd be best served by actually using
object authority to properly secure your server.

Charles




On Wed, Aug 7, 2019 at 5:55 AM Brian Garland via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

> Our IT department is asking for an exit program (based in IBM's direction)
> to block ODBC access from Run SQL Scripts and other programs and only allow
> a 3rd party SQL tool and our application through.  IBM pointed then to exit
> points but will not be more specific without a services contract.  The 3rd
> part tool is basically Run SQL Scripts but with extra logging and user
> control (i.e. read-only queries).  Our application uses either JDBC from
> Java or ODBC from PHP to access the database.
>
> I've looked into the exit points and found one that may help.  I've also
> seen comments about using special registers to know which app is calling.
>
> My Google skills are failing me in finding anything useful.  Is there any
> good all in one write up on this process?
>
>
>
> --
> Brian J. Garland
> Vermont Information Processing, Inc.
> brian.garland@xxxxxxxxxx
>
> --
> This email and any files transmitted with it are confidential and intended
> solely for the use of the individual or company to whom they are
> addressed.
> Do not disclose, distribute, or copy this email to others outside your
> company. If you have received this email in error, please notify the
> sender
> immediately and delete this email from your system.
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com