Consultor Eletrônico



Kbase P125338: How to create an implicit SQL user in the database, which will not need a password.
Autor   Progress Software Corporation - Progress
Acesso   Público
Publicação   29/07/2009
Status: Verified

GOAL:

How to create an implicit SQL user in the database, which will not need a password.

GOAL:

How to implement SQL-92 user access while still being able to see usernames in Progress Monitor?

GOAL:

Do not want to create individual Progress users for each of the 4GL users

GOAL:

Is it possible to add a user to the database without demanding login for other users?

FACT(s) (Environment):

All Supported Operating Systems

FIX:

1.) The database creator, will always have DBA permissions, so this user could be used for SQL connections without needing to add to the _user table (as described in Solution 20143 for example) which would then enable security at the database level enforcing the login screen.
2.) An implicit user could be created in the database, which will not need a password.

grant dba to user1;
commit;
Essentially creates a new SQL login without creating a user account in _user. The database can now be accessed in the same way as the database creator account i.e. with the user1 username and any password.
Then restrict access for this user by grant/revoke/deny specific privileges to specific tables, rather than full DBA rights.

For example:
grant select on pub.customer to user2;

user2 can log into the database but can only query the customer table.

Note: The above will only work if there are no users defined in the database security. ie no _user entries.