f



RE: [Maybe spam] Re: Relation of OS user to Informix database

Jonathan... am I correct in thinking that you can't revoke rights from a
user who has those rights because they're a member of public?

Ie, if they don't have the rights assigned with an explicit GRANT
statement, then you can't revoke their rights without revoking public's
rights and then granting permissions to all other users individually?

Cheers

Simon

-----Original Message-----
From: owner-informix-list@iiug.org [mailto:owner-informix-list@iiug.org]
On Behalf Of Jonathan Leffler
Sent: 25 August 2005 05:24
To: informix-list@iiug.org
Subject: [Maybe spam] Re: Relation of OS user to Informix database user

anupam.mukherjee@gmail.com wrote:
> I had just installed Informix Advanced Server version 10.0 for
> Windows and was checking out the security features. I created two
> operating system users, say A and B, gave both GRANT CONNECT and GRANT
> RESOURCE permissions from the informix DBA user.

First suggestion - don't make user 'informix' the DBA; the user already 
has an incredible amount of power (it's God w.r.t IDS).  However, this 
wasn't a factor in your observations.

When you created the database, was a MODE ANSI database, or a logged or 
an unlogged database.  I am 95% sure it wasn't MODE ANSI...

> Now, I could access
> the entire database, including both A and B's tables by logging in as
> either of the users.

Yes.  By default, in a non-ANSI database, public is given access 
permission on all tables automatically, unless you have NODEFDAC set 
correctly in the environment when the tables are created.  So, 
regardless of which user (A, B, or any other user C), what you saw is 
expected behaviour.  In a MODE ANSI database, no public access is given 
by default - one of the reasons I'm fairly sure you're not using such a 
database.

> I tried connecting as A from dbaccess and doing a
> REVOKE SELECT ON TABLE T FROM B. This gave an error saying no record
in
> ISAM and Unable to revoke permissions.

Only DBAs can revoke permissions on behalf of other users.  Since A is 
only resource-level user, A can only revoke permission that they've 
granted.  The permission should not have been removed.

> It however allowed me to do a
> GRANT SELECT ON TABLE T TO B.

Possibly - but did it actually add anything to the systabauth table?  If

you read the GRANT manual pages carefully, there appears to be a 
loophole such that a GRANT statement might execute 'OK' without granting

the permissions.

> This did not change a thing since B could
> already access A's tables. So I did a REVOKE SELECT ON TABLE T FROM B.

Since A doesn't own the table, and A is not a DBA (just resource), this 
should not achieve anything.

> Next, I actually logged out and logged back in as B and still,
> inexplicably enough, I was able to see A's tables easily enough.

Since the table owner didn't do the revoking, and the DBA didn't do the 
revoking, nothing was revoked.

> Any
> explanations would be most welcome as I have been struggling to get
> this working for sometime now.

You can't revoke permissions you don't have permission to revoke.

>    Also any pointers to the relation of Informix's users to the
> operating system level users would be welcome.

There's a one-to-one correspondence between Informix users and O/S
users.

-- 
Jonathan Leffler                   #include <disclaimer.h>
Email: jleffler@earthlink.net, jleffler@us.ibm.com
Guardian of DBD::Informix v2005.02 -- http://dbi.perl.org/

**********************************************************************
The information in this e-mail and any attachment is confidential. 
It is intended only for the named recipient(s). If you are not a
named recipient please notify the sender immediately and do not
disclose the contents to another person or take copies. Although
Axxia Systems has taken every reasonable precaution to ensure
that any attachment to this e-mail has been checked for viruses, 
it is strongly recommended that you carry out your own virus 
check before opening any attachment, as we cannot accept
liability for any damage sustained as a result of software virus 
infection. Axxia Systems reserves the right and senders of
messages shall be taken to consent to the monitoring and
recording of e-mails addressed to axxia.com.
**********************************************************************
sending to informix-list
0
Gosney
8/25/2005 7:48:31 AM
comp.databases.informix 16083 articles. 0 followers. Post Follow

1 Replies
845 Views

Similar Articles

[PageSpeed] 50

absolutley correct

everyone is a memebr of public

so you need to revoke public then add everyone seperately

you cannot say public can read it except for users a b and c

0
scottishpoet
8/25/2005 9:54:45 PM
Reply:

Similar Artilces:

RE: [Maybe spam] Re: Relation of OS user to Informix database #2
You can only revoke a privilege that exists explicitly and you are the GRANTOR, if a user's rights are part of "public" then you cannot prevent the access unless you revoke connection privileges from public Regards Colin There are 10 types of people in the world, those that understand binary and those that don't >From: "Gosney Simon" <GosneyS@axxia.com> >To: "Jonathan Leffler" <jleffler@earthlink.net>, <informix-list@iiug.org> >Subject: RE: [Maybe spam] Re: Relation of OS user to Informix database >user >Date: Thu, 25 Aug 2005 08:48:31 +0100 > >Jonathan... am I correct in thinking that you can't revoke rights from a >user who has those rights because they're a member of public? > >Ie, if they don't have the rights assigned with an explicit GRANT >statement, then you can't revoke their rights without revoking public's >rights and then granting permissions to all other users individually? > >Cheers > >Simon > >-----Original Message----- >From: owner-informix-list@iiug.org [mailto:owner-informix-list@iiug.org] >On Behalf Of Jonathan Leffler >Sent: 25 August 2005 05:24 >To: informix-list@iiug.org >Subject: [Maybe spam] Re: Relation of OS user to Informix database user > >anupam.mukherjee@gmail.com wrote: > > I had just installed Informix Advanced Server version 10.0 f...

Re: Relation of OS user to Informix database user
Just to add to the discussion <SNIP> > > > It however allowed me to do a > > GRANT SELECT ON TABLE T TO B. > >Possibly - but did it actually add anything to the systabauth table? If >you read the GRANT manual pages carefully, there appears to be a >loophole such that a GRANT statement might execute 'OK' without granting >the permissions. <SNIP> Is this a loophole or a security measure? I had been led to believe it works this way deliberately. By telling a user(hacker) that his command has failed is giving him information/knowledge about your systems you may not want Regards Colin There are 10 types of people in the world, those that understand binary and those that don't sending to informix-list ...

Re: Relation of OS user to Informix database user #2
This is from the -310 SQL errror code. Only one table with a given name can exist in a single database. (In an ANSI-compliant database, the name of the user that created a table name qualifies it, so one table of a given name per user can exist.) Regards Colin There are 10 types of people in the world, those that understand binary and those that don't >From: anupam.mukherjee@gmail.com >Reply-To: anupam.mukherjee@gmail.com >To: informix-list@iiug.org >Subject: Re: Relation of OS user to Informix database user >Date: 24 Aug 2005 23:22:39 -0700 > >Thanks for the great pointers. Sorry I'm a bit of a newbie and >hopefully my questions were not too basic. I did try reading up and >googling but could not find much. I have one more question . Is it at >all possible to create two different tables with the same name in the >same database but under two different users? sending to informix-list ...

Re: Relation of OS user to Informix database user #3
I think so... J. anupam.mukherjee@gmail.com escribis: > Thanks for the great pointers. Sorry I'm a bit of a newbie and > hopefully my questions were not too basic. I did try reading up and > googling but could not find much. I have one more question . Is it at > all possible to create two different tables with the same name in the > same database but under two different users? sending to informix-list definately! It can be done for temp tables ...

Relation of OS user to Informix database user
Hi, I had just installed Informix Advanced Server version 10.0 for Windows and was checking out the security features. I created two operating system users, say A and B, gave both GRANT CONNECT and GRANT RESOURCE permissions from the informix DBA user. Now, I could access the entire database, including both A and B's tables by logging in as either of the users. I tried connecting as A from dbaccess and doing a REVOKE SELECT ON TABLE T FROM B. This gave an error saying no record in ISAM and Unable to revoke permissions. It however allowed me to do a GRANT SELECT ON TABLE T TO B. This did not change a thing since B could already access A's tables. So I did a REVOKE SELECT ON TABLE T FROM B. Next, I actually logged out and logged back in as B and still, inexplicably enough, I was able to see A's tables easily enough. Any explanations would be most welcome as I have been struggling to get this working for sometime now. Also any pointers to the relation of Informix's users to the operating system level users would be welcome. Regards, Anupam have you revoked from "public"? anupam.mukherjee@gmail.com wrote: > Hi, > I had just installed Informix Advanced Server version 10.0 for > Windows and was checking out the security features. I created two > operating system users, say A and B, gave both GRANT CONNECT and GRANT > RESOURCE permissions from the informix DBA user. Now, I could access > the e...

How to copy a sun-database in one informix database to another informix database?
Hi, Sorry I am not an informix dba, and I was faced to copy a sub-database(sorry I don't know the clear name of such concept, as informix is like sql-server, which used multiple database) from one informix database system to another informix database. I know in oracle, we can use transportable tablespace, copy the datafile and transport the metadata, and do something else. How can I do it in informix then? Is there document which talk about the detail step? Thanks It would really help if you knew the versions of the Informix databases. Assuming Informix IDS 7.x or IDS...

RE: [Informix][Informix ODBC Driver] Database locale information mismatch
You could try issuing the following statement and see what the engine is configured for. onstat -g env This will give you the environment of the engine. I believe it is listed there what the locale is set to. David -----Original Message----- From: informix-list-bounces@iiug.org [mailto:informix-list-bounces@iiug.org] On Behalf Of bobkot@gmail.com Sent: Tuesday, May 23, 2006 7:28 AM To: informix-list@iiug.org Subject: [Informix][Informix ODBC Driver] Database locale information mismatch I have download ClientSDK 2.90.TC4 I am trying to connect to an IDS10 database. My iLogin works fine, but I cannot set up the ODBC driver, I keep getting the message "[Informix][Informix ODBC Driver] Database locale information mismatch" I cannot leave it blank, under environment, and I cannot find any matching pairs. Can somebody help. XP client and Linux server _______________________________________________ Informix-list mailing list Informix-list@iiug.org http://www.iiug.org/mailman/listinfo/informix-list Version 10.00.UC4E is what I am running. How do I determine what the database was created with ? I have no customer support - that is me - so where to for the patches ? Would that be for the IDS or the SDK This is a multipart message in MIME format. --=_alternative 0023D97D65257178_= Content-Type: text/plain; charset="US-ASCII" To find out what's the database locale in your environment go to the server in...

RE: [Maybe Spam] Re: Informix device permissions after SuSE reboot
-----Original Message----- From: owner-informix-list@iiug.org [mailto:owner-informix-list@iiug.org] On Behalf Of Art S. Kagel Sent: Friday, June 25, 2004 6:07 PM To: informix-list@iiug.org Subject: [Maybe Spam] Re: Informix device permissions after SuSE reboot On Fri, 25 Jun 2004 08:08:07 -0400, Neil Truby wrote: > "Doug Lawry" <lawry@nildram.co.uk> wrote in message > news:cbh1po$lis$1@nntp0.reith.bbc.co.uk... >> On Suse 2.4.19, we also had to add a "chown" command to: >> >> /etc/init.d/boot.l...

RE: [Maybe Spam] Re: Informix WGE with IBM DB2 Gold Bundle
True, I was told by IBM very recently, that it is built into DB2 - version 8.2 if I remember correctly (modeled after Informix like you mentioned) -----Original Message----- From: owner-informix-list@iiug.org [mailto:owner-informix-list@iiug.org] On Behalf Of Data Goob Sent: Tuesday, June 29, 2004 2:16 AM To: informix-list@iiug.org Subject: [Maybe Spam] Re: Informix WGE with IBM DB2 Gold Bundle It's my understanding that replication is an up-and-coming feature for DB2 in Stinger, modeled after Informix HADR: ftp://ftp.software.ibm.com/software/data/db2/stinger/stingerw...

RE: Do I have to have an Informix Database?
Bruce, You have to buy a database from somewhere. But 4Js and Querix offer versions of the Informix-4GL compiler that will work with other databases. I think they both give the choice between Informix and Oracle, and I think DB2. But visit their web-sites to find out the latest info. Their compilers also work on Windows or UNIX thereby giving even more flexibility. Malcolm -----Original Message----- From: owner-informix-list@iiug.org [mailto:owner-informix-list@iiug.org] On Behalf Of Bruce Truter Sent: 15 February 2004 03:36 To: informix-list@iiug.org Subject: Do I have ...

RE: [SPAM] Re: Informix for linux
Because the IIUG server was out due to power from the hurricane that hit the East Coast of the United States The IIUG server is now back up and running At 09:16 PM 5/27/2003 -0400, Rob Vorbroker wrote: >ikke - I'm cc'ing this to the webmaster@iiug.org. >His name is Stuart Litel and once you know him...well. > >Perhaps he can figure out why you haven't recieved a >confirmation email in 3 days. Please remember that >everyone who is on the IIUG BoD or other committees >are volunteers. (: Kinda like IBM/Informix Marketing >I guess. LOL...

Re: Start informix database
May be you have more than one Informix's instances and your missed database was not created in the instance where you are looking for it. Send us the content of your sqlhosts file and the result of : echo $INFORMIXSERVER Regards ----- Original Message ----- From: "madiego" <madiego@qf21.com> To: <informix-list@iiug.org> Sent: Tuesday, August 03, 2004 1:04 PM Subject: Start informix database > Hello, > > I had an informix database in the unix server. The server has been > restarted and now I can't start the database. &...

Re: Benchmarking for Informix database
Peter Chang said: > > I was wondering if there are any benchmarking tool that I can use to > calculate TPM of an Informix database on a particular server? I seem to recall that it's possible to download the TPC benchmarks from www.tpc.org ...? But the best benchmark is your own application and something like a load runner robot. -- Bye now, Obnoxio "C'est pas parce qu'on n'a rien � dire qu'il faut fermer sa gueule" - Coluche "I'm trying to see things your way, but I can't get my head up my ass" - JCH &qu...

RE: Informix database creation
The Raw device of 17Gb will not be useful to you on 7.31.FD6. You need to create then at 2Gb (maximum sizes are listed in your release notes), or upgrade to 9.40. Check onstat -d again...it suggests you have successfully created that dbspace and are trying to create it again. MW > -----Original Message----- > From: owner-informix-list@iiug.org > [mailto:owner-informix-list@iiug.org]On Behalf Of Seweryn > Sent: Thursday, 7 August 2003 7:57 a.m. > To: informix-list@iiug.org > Subject: Informix database creation > > > Hi all, > > I'm ...

DataBase DataBase DataBase DataBase
DataBase DataBase DataBase DataBase Porfessional Programmable Database Ver. 2.0 2.1 Million Record Capacity. Search Rate: 2000/Records/Second. DataBase Type: Random Access. Can Create Unlimited Databases. Programmable fields for any Application. Build Time One Second, (Auto Creates DB). Setup Time: Instantly, Just Enter DB Name. Ultra Easy to Learn (Typically 30 Seconds) Ultra Cheap Price, Special $20, Paypal Accepted. Application Mailed Instantly (file Attached Email). Easy Paypal Online Ordering. See Site Below. http://www.vehiclerepair.org/dbPro/dbpro.html ...

DataBase DataBase DataBase DataBase
DataBase DataBase DataBase DataBase Porfessional Programmable Database Ver. 2.0 2.1 Million Record Capacity. Search Rate: 2000/Records/Second. DataBase Type: Random Access. Can Create Unlimited Databases. Programmable fields for any Application. Build Time One Second, (Auto Creates DB). Setup Time: Instantly, Just Enter DB Name. Ultra Easy to Learn (Typically 30 Seconds) Ultra Cheap Price, Special $20, Paypal Accepted. Application Mailed Instantly (file Attached Email). Easy Paypal Online Ordering. See Site Below. http://www.vehiclerepair.org/dbPro/dbpro.html Scott: #DataBase...

RE: Rowids in Informix Databases
Vijay All the tables will have rowids (they must !!), they are not visible on a normal table view but can be returned by query. If a table is fragmented (but only if (v7.31) ) it can be created WITH ROWIDS which will create a separate rowid column. Why do you need rowids? They tend to be a fudge to cover up poor or inadequate database design. Don't you have lots of lovely, simple (single column) primary keys to use to identify your records. Keith=20 -> -----Original Message----- -> From: Vijay Kumar [mailto:rudrappa@india.hp.com] -> Sent: Tuesday, October 12, 20...

Re: Informix database creation #4
Well I dont know! I was given this advice from Infomix Support Group only Ravinder Bahadur _________________________________________________________________ It's raining movies. Bollywood is flooded. http://server1.msn.co.in/features/augustmovies03/index.asp August has arrived! sending to informix-list ...

RE: change the owner of a database in informix
Don�t post HTML. You do not have a choice on the owner of a database. If you want to change the owner of a table, index, etc drop and recreate it. MW ________________________________ From: owner-informix-list@iiug.org [mailto:owner-informix-list@iiug.org] On Behalf Of Muthana.AL-Temimi@tu-harburg.hamburg.de Sent: Thursday, 3 February 2005 3:49 a.m. To: informix-list@iiug.org Subject: change the owner of a database in informix Hello there, i would like to change the owner of the database in Informix: for example: I have the database cal...

RE: Informix database creation #2
Hi The existing chunk is already starting at offset of 500. Your new chunk should have the offset as 600501 . Regards Ravinder Bahadur _________________________________________________________________ Are you Unmarried? http://www.bharatmatrimony.com/cgi-bin/bmclicks1.cgi?4d Register in India's No 1 Matrimony. sending to informix-list "Ravinder Bahadur" <ravinder_b@hotmail.com> wrote in message news:bgsam4$i9q$1@terabinaries.xmission.com... > > Hi > The existing chunk is already starting at offset of 500. Your new chunk > sh...

RE: Moving Informix TableSpaces between databases
Aash You don't tell us which version of IDS you are using, however have you investigated RAW tables (if they are avaialable in your version). They can be created in logged or unlogged dbs and can allow the type of access you require. RAW tables cannot be indexed or have constraints, but the table can be changed to STANDARD (very quickly) and then be indexed. You will not need any intermediate files, just INSERT INTO 'raw_table' SELECT FROM 'source_table'. Keith -----Original Message----- From: Aashish Ramsinghani - ASDC, Chennai [mailto:Aashishsr@hcl.in] Sent: Friday, December 09, 2005 13:01 To: informix-list@iiug.org Subject: Moving Informix TableSpaces between databases Hi I am using Informix for one of my DW projects. We are loading data from the source system into the staging area both are separate Databases. Source has logging enables and staging has it disabled. The problem comes when I try to access data across both these databases. I cannot link tables between these databases because of their logging properties. So I am dumping the data into a CSV file and loading it again but for my initial load which consists of 40+ million records it is a problem. In oracle I know we can make a separate table space and dump the data there then load the table space to another database. I don't know if such a thing is possible in Informix. Any help will be appreciated. Thanks and Regards, Aash sending to informix-...

Re: Start informix database #2
Hi.. This is an example INFORMIXDIR=/opt/informix PATH=$PATH:$HOME/bin:$INFORMIXDIR/bin INFORMIXSERVER=coldecon_shm ONCONFIG=onconfig.coldecon export PATH INFORMIXDIR INFORMIXSERVER ONCONFIG oninit INFORMIXSERVER=opera_shm ONCONFIG=onconfig.opera export PATH INFORMIXDIR INFORMIXSERVER ONCONFIG oninit --- madiego <madiego@qf21.com> wrote: > Hello, > > I had an informix database in the unix server. The > server has been > restarted and now I can't start the database. > I execute 'oninit' and only can started the default...

Re: Storing password in informix database
If you are on 9.x versions (with the WEB Datablade installed) , you can use a function called webpwcrypt which will encrypt your password and store it in the database. Otherwise, I would assume you'll have to write your own algorithm to do the same. The usage is as follows: select webpwcrypt(password,2194) from user where the second parameter is some kind of a seed# to generate the encrypted password. HTH. Thanx much, Rajib Sarkar Advisory Support Engineer (RAS) IBM Data Management Group Ph : (602)-217-2100 Fax: (602)-217-2100 As long as you derive ...

Re: Informix database creation #3
Seweryn: When you run "onstat -d" - it gives size in terms of blocks (pagesize). It can be 2K or 4 K depending upon OS. You can find out the page size using "onstat -b | grep 'buffer' | awk '{print $10}' " - this will return page size in BYTES . When you create the dbspace using onspaces - you need to mention the size of the dbspace interms of "KBytes" example: In your OS, if you have Page size 2K - then you need to start the offset from 1200000, you can go only upto 800000 KB size of dbspace due to 2GB size limitation. try thi...

Web resources about - RE: [Maybe spam] Re: Relation of OS user to Informix database - comp.databases.informix

Relation - Wikipedia, the free encyclopedia
Ternary relation , finitary relation in which the number of places in the relation is three. Ternary relations may also be referred to as 3-adic, ...

Three taken into custody in relation to Logan missing pair
... custody after police draw weapons on the Gateway Bridge. ​A vehicle intercepted on the Gateway Motorway this afternoon was stopped in relation ...

Three taken into custody in relation to Logan missing pair
Three people taken into custody after police draw weapons on the Gateway Bridge.

UK visa restrictions could impact relations with Australia, officials warn
Tighter visa regulations for Australians travelling to the UK could have a long-term impact on the relationship between the two countries, officials ...

Apple hires former Viacom PR exec for Apple TV content relations
... to expand the content available on the new fourth-gen Apple TV, Variety reports that the company has hired a former Viacom publication relations ...

Obama Wants To Turn A Page In Our Relations With Cuba Cruz And Rubio Are Stuck In A Time Warp
... CIA supported fascist dictatorship of Fulgencio Batista. Both Cubanos oppose mainstream, bipartisan American opinion about normalizing relations ...

Meet Amelia Pond: 'Vice president of future Google relations with Apple'
... wrote scripts to secretly automate a lot of his job — and email his wife and make a latte Pond is "Vice president of future Google relations ...

First black Southern Baptist president says US race relations worse under Obama
Race relations in America have worsened under President Obama's leadership, a former head of the Southern Baptist Convention has claimed.

Bernie Sanders: I would 'absolutely' improve race relations
... that the fruits of his economic agenda would help ease racial tensions in America. Asked by PBS debate moderator Judy Woodruff if "race relations ...

In A Sanders Presidency Race Relations Will ‘Absolutely’ Be Better
In A Sanders Presidency Race Relations Will ‘Absolutely’ Be Better

Resources last updated: 2/29/2016 6:53:07 PM