Set role command - security problem

From: Steven Deneir <Steven.Deneir_at_health.fgov.be>
Date: 1997/11/20
Message-ID: <01bcf599$9ea758a0$980114ac@steven.health.fgov.be>#1/1

Hello,

I have a little problem with my security. I created a user with 2 roles, one default, the other is automatically activated when a certain application is launched. Until there no problem, the problem begins when the user launches SQL or ODBC. When he uses the command set role, he is able to activate the 2nd role himself. This is highly undesired.

So now, my question, is there an option that prevents that a user can activate a role with the set role command via odbc or in sql?

Thanks in advance everybody
Please send a cc to StevenDeneir_at_writeme.com

---

Mail from Deneir Steven
Address StevenDeneir_at_writeme.com
Join the Internet Tour for each Koi Lover at http://www.geocities.com/Heartland/Prairie/8983/

---

Received on Thu Nov 20 1997 - 00:00:00 CST