Query Security

Yahoo Archive
1
Correction

I do at least have a password setup on the database for ProVision ( ok, I'm
getting really old and forgetful ).

If you start ProVision - link to your Database and then:

* Tools / Data Administration
* Admin / Security / User List --- Add yourself as a user ...

* Admin / Security / Edit Data Security allows you to control access to
individual tables ?????

Looks like this would be kind of fun to setup ...

-----Original Message-----
From: Todd Anderson [mailto:tanderson@...]
Sent: Wednesday, June 16, 2004 9:04 AM
To: 'vantage@yahoogroups.com'
Subject: RE: [Vantage] Query Security


I could be wrong on this but (a) this has been a problem since day one (b)
the only way to stop it would be to setup user security within the "Progress
Database" at the table level in addition to using the standard Vantage
"Application" security.

I have NO idea how this would play out between the two security schemes.

On the other hand I've always been a bit curious about it.

Has anyone ever set this up?

On a similar note we have ProVision and whenever I install the Progress
client software on PC's they get all of the Icons for ProVision which I
diligently delete. Of course if anyone is smart enough to find the
executables they can run ProVision. I try not to think about what they
could do.

Any ideas?

Todd Anderson

-----Original Message-----
From: plmaher2001 [mailto:plmaher2001@...]
Sent: Wednesday, June 16, 2004 7:42 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Query Security


It was recently discovered that in 6.0 (maybe all versions) that it
is possible to access tables such as payroll (Emp.Basic)(viewing
only) by using a query, even if you would normally not have those
security rights. Upper managements immediate response is to
completely shut down queries. What kind of security measures is
anyone using.



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
< http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.> >
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
< http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages> >
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>
< http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links> >



Yahoo! Groups Sponsor

ADVERTISEMENT

<
http://us.ard.yahoo.com/SIG=129i6k9fi/M=298184.5022502.6152625.3001176/D=gr
<http://us.ard.yahoo.com/SIG=129i6k9fi/M=298184.5022502.6152625.3001176/D=gr
>
oups/S=1705007183:HM/EXP=1087476135/A=2164338/R=0/SIG=11ed4vqbv/*
http://www. <http://www.>
netflix.com/Default?mqso=60183349> click here

<
http://us.adserver.yahoo.com/l?M=298184.5022502.6152625.3001176/D=groups/S=
<http://us.adserver.yahoo.com/l?M=298184.5022502.6152625.3001176/D=groups/S=
>
:HM/A=2164338/rand=851457564>


_____

Yahoo! Groups Links


* To visit your group on the web, go to:
http://groups.yahoo.com/group/vantage/
<http://groups.yahoo.com/group/vantage/>
< http://groups.yahoo.com/group/vantage/
<http://groups.yahoo.com/group/vantage/> >


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
< http://docs.yahoo.com/info/terms/ <http://docs.yahoo.com/info/terms/> > .




[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>



Yahoo! Groups Sponsor

ADVERTISEMENT

<http://us.ard.yahoo.com/SIG=129to8v13/M=298184.5022502.6152625.3001176/D=gr
oups/S=1705007183:HM/EXP=1087480905/A=2164330/R=0/SIG=11eamf8g4/*http://www.
netflix.com/Default?mqso=60183350> click here

<http://us.adserver.yahoo.com/l?M=298184.5022502.6152625.3001176/D=groups/S=
:HM/A=2164330/rand=838942167>


_____

Yahoo! Groups Links


* To visit your group on the web, go to:
http://groups.yahoo.com/group/vantage/
<http://groups.yahoo.com/group/vantage/>


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]
2
It was recently discovered that in 6.0 (maybe all versions) that it
is possible to access tables such as payroll (Emp.Basic)(viewing
only) by using a query, even if you would normally not have those
security rights. Upper managements immediate response is to
completely shut down queries. What kind of security measures is
anyone using.
3
I could be wrong on this but (a) this has been a problem since day one (b)
the only way to stop it would be to setup user security within the "Progress
Database" at the table level in addition to using the standard Vantage
"Application" security.

I have NO idea how this would play out between the two security schemes.

On the other hand I've always been a bit curious about it.

Has anyone ever set this up?

On a similar note we have ProVision and whenever I install the Progress
client software on PC's they get all of the Icons for ProVision which I
diligently delete. Of course if anyone is smart enough to find the
executables they can run ProVision. I try not to think about what they
could do.

Any ideas?

Todd Anderson

-----Original Message-----
From: plmaher2001 [mailto:plmaher2001@...]
Sent: Wednesday, June 16, 2004 7:42 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Query Security


It was recently discovered that in 6.0 (maybe all versions) that it
is possible to access tables such as payroll (Emp.Basic)(viewing
only) by using a query, even if you would normally not have those
security rights. Upper managements immediate response is to
completely shut down queries. What kind of security measures is
anyone using.



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>



Yahoo! Groups Sponsor

ADVERTISEMENT

<http://us.ard.yahoo.com/SIG=129i6k9fi/M=298184.5022502.6152625.3001176/D=gr
oups/S=1705007183:HM/EXP=1087476135/A=2164338/R=0/SIG=11ed4vqbv/*http://www.
netflix.com/Default?mqso=60183349> click here

<http://us.adserver.yahoo.com/l?M=298184.5022502.6152625.3001176/D=groups/S=
:HM/A=2164338/rand=851457564>


_____

Yahoo! Groups Links


* To visit your group on the web, go to:
http://groups.yahoo.com/group/vantage/
<http://groups.yahoo.com/group/vantage/>


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]