Re: Selectively Control ODBC Access? How?

Create user/role that has select only privilege then let everybody have it. They can only see the tables you want them to see and can only perform the operations you allow. This is what I had to do with a personnel database for 7,000 employees. About a dozen "needed" access to write their own reports using MS Access. So, I just created a user for them whose authority was select only (also gave a few of them create view but that was it). Worked really well and everybody is happy...and I didn't even have to call them morons (and if you think of your users that way, they won't be your users for long! (IMHO)) Good luck

Jerry

Roger Westbrook wrote:

> Ok, there has to be a way to do this.
>
> We've got a 3rd party app which uses ODBC to connect to our Oracle 7.3.4.2 database running on our AIX 4.3.2 box. Each user has their own username but due to the nature of the app each user has pretty much total authority to most of the app's tables. There is a lot of protection built into the app, of course, but that doesn't stop anyone from using that same ODBC link to connect without benefit of the app's controls. So you see where this is going... Once ODBC was set up for the app's connectivity we had a few users who "discovered" that you can access the same database with MS ACCESS. Needless to say, I cannot allow this.
> I've already had one of them who decided she didn't like the Transportation Status Codes and wanted change them to something she thought would be more logical. Luckily the referential constraints stopped her and I she came to my desk to ask me if she could borrow my SQL books. I almost had heart failure when as she explained what she wanted to do and how.
>
> So...
>
> I must have the ODBC link for the 3rd party app.
>
> I cannot allow applications like MS Access, or MS Query, etc to connect.
>
> I cannot take MS Access, etc, off their desktops because they use it for other things.
>
> I'm losing sleep over what these morons might do to my data!! What can I do?
>
> Thanks in advance,
> Roger Westbrook, DBA/Sys Admin
> Dollar General Corp
> rwestbrook_at_dollargeneral.com
Received on Mon Nov 15 1999 - 00:00:00 CET