Re: Commands for Limited Users
"Phil Ashe" <[email protected]>
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Message-ID | <[email protected]> |
Rob: I continue to find it surprising when I encounter any shop that actively develops their own software and doesn't have a well-defined DBA role. Even if you purchased all your applications, you should still have a person who is responsible for the database. There's too much invested in your organization's data not to have at least one person responsible for it. There are too many ways to mess up access to your database and the availability to the data for database management not to be tightly controlled. Phil Ashe NetIQ (A division of Attachmate) 1233 West Loop South, Suite 1800 | Houston, TX 77027 USA 713.418.5279 phone [email protected] www.netiq.com -----Original Message----- From: security400-bounces-Zwy7GipZuJhWk0Htik3J/[email protected] [mailto:security400-bounces-Zwy7GipZuJhWk0Htik3J/[email protected]] On Behalf Of [email protected] Sent: Thursday, September 07, 2006 12:22 PM To: Security Administration on the AS400 / iSeries Subject: Re: [Security400] Commands for Limited Users Also, regarding respecting the integrity of data files. This is where a lot of people who do not think that the i5 requires a dba fall flat on their face. There is much more that should be done at the database level to ensure that people can't muck it up through back doors. Frankly it's the very limited few who have *ALLOBJ that are more likely to think they know what they are doing and screw up the data. Like the systems person who's just going to run that quick sql to fix some data. And, oops, 10,000+ rows are fubared. What is needed is more usage of constraints and triggers. Rob Berendt -- Group Dekko Services, LLC Dept 01.073 PO Box 2000 Dock 108 6928N 400E Kendallville, IN 46755 http://www.dekko.com _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.