IDS Forum

Re: User Name from Connection Pool

Posted By: Fernando Nunes
Date: Wednesday, 21 September 2016, at 2:12 p.m.

In Response To: Re: User Name from Connection Pool (Art Kagel)

With a trusted context (see my previous response) that requirement is
lifted.
Regards

On Wed, Sep 21, 2016 at 6:54 PM, Art Kagel <art.kagel@gmail.com> wrote:

> Only the shared user id used by the app server needs to have DBA privilege
> and setsessionauth privilege, not the user ids that it will be changing to.
>
> Art
>
> Art S. Kagel, President and Principal Consultant
> ASK Database Management
> www.askdbmgt.com
>
> Blog: http://informix-myview.blogspot.com/
>
> Disclaimer: Please keep in mind that my own opinions are my own opinions
> and do not reflect on the IIUG, nor any other organization with which I am
> associated either explicitly, implicitly, or by inference. Neither do
> those opinions reflect those of other individuals affiliated with any
> entity with which I am affiliated nor those of the entities themselves.
>
> On Wed, Sep 21, 2016 at 1:26 PM, Informix DBA <in4mixdba@gmail.com> wrote:
>
> > Hi Art,
> >
> > Thank you. Yes we considered using set session authorization and that is
> > precisely what we wish to accomplish. However, the concern is that the
> > user needs to be DBA on Informix. From the doc, "Both the DBA and
> > SETSESSIONAUTH access privilege are required to execute this statement.".
> >
> > I would like to do exactly that, however I do not want to give them DBA
> > privilege since they would then have access to every DB object.
> >
> > Any other suggestions to accomplish this?
> >
> > Thank You,
> >
> > --Dave
> >
> > On Wed, Sep 21, 2016 at 12:16 PM, Art Kagel <art.kagel@gmail.com> wrote:
> >
> > > See the SET SESSION AUTHORIZATION ... statement. Your app server can
> > change
> > > its perceived user id to the user requesting the DML or DDL statement
> > > execution that way.
> > >
> > > Art
> > >
> > > Art S. Kagel, President and Principal Consultant
> > > ASK Database Management
> > > www.askdbmgt.com
> > >
> > > Blog: http://informix-myview.blogspot.com/
> > >
> > > Disclaimer: Please keep in mind that my own opinions are my own
> opinions
> > > and do not reflect on the IIUG, nor any other organization with which I
> > am
> > > associated either explicitly, implicitly, or by inference. Neither do
> > > those opinions reflect those of other individuals affiliated with any
> > > entity with which I am affiliated nor those of the entities themselves.
> > >
> > > On Wed, Sep 21, 2016 at 11:50 AM, Informix DBA <in4mixdba@gmail.com>
> > > wrote:
> > >
> > > > Hi,
> > > >
> > > > We are running 11.70.FC7W2 on Solaris. We have a Java application
> that
> > > > uses a connection pool for Informix DB connections. However, we have
> > many
> > > > triggers that log user activity on certain tables. We would like to
> log
> > > > the user that made the change, however from the DB side we only see
> the
> > > > application user from the connection pool and not the actual user id.
> > > > onstat -u only shows "java_app" in the user column and we want the
> > actual
> > > > user name.
> > > >
> > > > How can we get the user name connecting to the connection pool so
> that
> > > the
> > > > trigger can log the real user name.
> > > >
> > > > Thank You,
> > > >
> > > > --Dave
> > > >
> > > > --001a1145b3ea698281053d0680d4
> > > >
> > > >
> > > > ************************************************************
> > > > *******************
> > > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > > >
> > > >
> > >
> > > --001a114b1ccaaf4a4b053d06dd14
> > >
> > >
> > > ************************************************************
> > > *******************
> > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > >
> > >
> >
> > --94eb2c072bb6a18744053d07d85d
> >
> >
> > ************************************************************
> > *******************
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
> >
>
> --047d7b5d3e0c5334af053d083da5
>
>
> ************************************************************
> *******************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>

--
Fernando Nunes
Portugal

http://informix-technology.blogspot.com
My email works... but I don't check it frequently...

--94eb2c1246daa05e90053d0879a9

Messages In This Thread

• User Name from Connection Pool
  Informix DBA -- Wednesday, 21 September 2016, at 11:50 a.m.
  • Re: User Name from Connection Pool
    Art Kagel -- Wednesday, 21 September 2016, at 12:16 p.m.
    • Re: User Name from Connection Pool
      Informix DBA -- Wednesday, 21 September 2016, at 1:26 p.m.
      • Re: User Name from Connection Pool
        Art Kagel -- Wednesday, 21 September 2016, at 1:54 p.m.
        • Re: User Name from Connection Pool
          Fernando Nunes -- Wednesday, 21 September 2016, at 2:12 p.m.
  • Re: User Name from Connection Pool
    Fernando Nunes -- Wednesday, 21 September 2016, at 12:25 p.m.
    • Re: User Name from Connection Pool
      Informix DBA -- Wednesday, 21 September 2016, at 2:20 p.m.
      • Re: User Name from Connection Pool
        Informix DBA -- Thursday, 22 September 2016, at 3:10 p.m.

IDS Forum is maintained by Administrator with WebBBS 5.12.