RE: Controlling ODBC access

Agreed. I've written DIY exit programs for ODBC, and we now have a commercial package. Either way it's a slippery task to control ODBC data access primarily via exit points.




-----Original Message-----
From: Charles Wilt [mailto:charles.wilt@xxxxxxxxx]
Sent: Wednesday, August 07, 2019 8:47 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Controlling ODBC access

100% agree with Rob...

You can prevent all access via ODBC/JDBC

But you're fooling yourself if you think that you can limit access to only certain tools, especially if those tools sign on with the users actual credentials..

If the tools sign on with a unique user ID, it might work.

But rather than playing wack-a-mole, you'd be best served by actually using object authority to properly secure your server.

Charles