Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

question about informix sysmaster 1

Status
Not open for further replies.

kingartur

Technical User
Apr 25, 2002
3
IT
Hi.
A little question about Informix.
Can I prevent a unix user (with resource grant) from accessing to the SYSMASTER on Informix XPS?
In other words, can I remove "GRANT TO PUBLIC" from the Informix tables, without prevent a unix user from working?
Thanks in advance
 
Yes you can revoke any permissions from public on sysmaster database, althogh revoke connect renders rest of permissions unusable, and there is the way to specify a group for informix users at init time
 
generally only dba's can have connect to sysmaster, as necessary tables (systables etc) are seamlesly mirrored to other databases
 
thanks for your reply.
I tried to revoke all permissions from public, but it worked only for some tables;
for example:
revoke all on sysbusmlogtab from public;
revoke all on sysconfig from public;
revoke all on systabpaghdrs from public;
revoke all on sysdistcache from public;
revoke all on syslogslices from public;
revoke all on sysbuobject from public;
revoke all on sysbuworker from public;
while on the other tables (for example sysshmvals) I get the following error:

revoke all on sysshmvals from public;

211: Cannot read system catalog (sysfragments).
111: ISAM error: no record found.

any ideas on that?
thanks in advance
 
all sys* tables are not manipulated with grant/revoke as they somehow represent a table-like interface to informix internal structures, you can revoke only permisiions you granted on these NOT-tables (why?)

revoke all connects from sysmaster ( excluding informix of course ) and you will be safe :)

migrate your data off the sysmaster to new database, as ssmaster is intendet to store service information
 
thanks for your help.
I must prevent a user from start queries on sysmasters (for example with products as BACHMAN or ERWIN) that hung connection for the others users.
After revoke connect from public, it seams work.
Thank you.
Bye
arturo
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top