IDS Forum

Re: Active Users

Posted By: Richard Snoke
Date: Friday, 15 December 2006, at 11:53 a.m.

In Response To: Active Users (CHUCK GILKER)

Hi,

This is a more complex question than it might appear because there is no
precise definition of "Informix user" or "Informix Administrator". The
sysusers table in each database shows who can do what in or to that
database. But the question of who can use certain utlities (oncheck,
onmode, onspaces for example) is controlled by the permissions on those
executable files. So you have to check which users are in the groups that
are allowed to execute each utility. Next, the user informix has special
privileges, and in some cases those privileges extend to all users in the
group informix. Lastly, if you're using IDS 10, you'll have to show
what's configured in the onconfig file for the DBCREATE_PERMISSION
parameter. All of those things are necessary to show who's allowed to do
what to "Informix".

So I am not aware of any single report that will answer your auditors.
Depending on which OS you're using, you'll have to do things to show the
OS users and groups, you'll have to show the results of a query on the
sysmaster:sysdatabases table followed by a query on the sysusers table in
each of those databases, you'll have to show the results of onstat -c, and
you'll have to show the privileges for each of the executables in each
separate installation of IDS you have.

And, of course, if you have any privileges assigned to "public", then
anyone who can access the system can do those things. I hope that's not
the case.

Cheers,
Dick Snoke
IBM Software Group - ChannelWorks
dsnoke@us.ibm.com
(404) 487-1595

"CHUCK GILKER" <cgilker@milbank.com>
Sent by: ids-bounces@iiug.org
12/14/2006 08:27 PM
Please respond to
ids@iiug.org

To
ids@iiug.org
cc

Subject
Active Users [8004]

Our auditors have asked that I provide the following:
System generated listing of active Informix users (with their access
permissions), as well as a system generated listing of Informix
administrators.

Is there such a listing? How do I generate such a listing?

IDS 9.40.FC3
HPUX 11.11

Thanks,
Chuck

*******************************************************************************

Forum Note: Use "Reply" to post a response in the discussion forum.

Messages In This Thread

• Active Users
  CHUCK GILKER -- Thursday, 14 December 2006, at 8:27 p.m.
  • Re: Active Users
    Keith Simmons -- Friday, 15 December 2006, at 5:24 a.m.
    • Re: Active Users
      CHUCK GILKER -- Friday, 15 December 2006, at 9:50 a.m.
      • Re: Active Users
        ART KAGEL, BLOOMBERG/ 731 LEXIN -- Friday, 15 December 2006, at 10:00 a.m.
        • Re: Active Users
          Mark Jamison -- Friday, 15 December 2006, at 10:57 a.m.
          • Re: Active Users
            Mark Jamison -- Friday, 15 December 2006, at 11:50 a.m.
        • Re: Active Users
          Jonathan Leffler -- Friday, 15 December 2006, at 9:30 p.m.
      • Re: Active Users
        Marco Greco -- Friday, 15 December 2006, at 10:08 a.m.
      • Re: Active Users
        infx dba -- Friday, 15 December 2006, at 10:12 a.m.
        • RES: Active Users
          Celso Cabral Coimbra -- Friday, 15 December 2006, at 10:58 a.m.
  • Re: Active Users
    Richard Snoke -- Friday, 15 December 2006, at 11:53 a.m.

IDS Forum is maintained by Administrator with WebBBS 5.12.