Can ODBC be restricted to Read Only on progress 9.1D?

Steve -

The offsite web server is an easy one - if your host is a flexible one -
just create a VPN / IPSEC tunnel between the webserver and the vantage
server so that the odbc has a secure path. I'm assuming that your using
either ASP or PHP (or something similiar) so that the all the thinking is
done by the web server including the ODBC connection so the user has no clue
as to what is making everything work and can't tell by looking at the source
they receive in their browser. The only other suggestion, is to use a ASP /
PHP encryption program. These work like WINZIP but in realtime. So if
anyone actually gains access to the server and starts looking at your active
pages all they see is scrambled garbage.

If you didn't already have the TS installed - I would start thinking about
using IPSEC to lock down the communication channel to Vantage along with the
ODBC password changes. At the very least you should be able to know who and
when someone had the opportunity to access your system.

Are we having fun yet ?

Charles

----- Original Message -----
From: "Steve Wirch" <wirch@...>
To: <vantage@yahoogroups.com>
Sent: Tuesday, September 27, 2005 4:34 PM
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?


> Hi Charles,
>
> Very good points, Thanks! One of the compounding problems we have is a
> web server that accepts customer orders, and pumps the data, including
> new customers and ship-to's into vantage via customer connect and the IM
> tables. It does this via odbc, and it's outside the firewall at a
> service provider. I don't think we want to interject citrix or ts into
> that fray, but I'll check with the web master. Luckily I should be able
> to restrict its login to just write access to a couple of IM tables.
>
> On your comments, full agreement here. It's actually looking to me like
> the next wave of consulting frenzy behind Six Sigma, Lean manufacturing,
> ISO, TQM, etc. etc. etc. All good programs, like sox, but which can way
> too readily can spin out of control and hurt the company more than help.
>
>
> I was surprised to find out that the usage of sap actually triggers
> massive additional work. It is "too configurable". Not certain about
> worldcom, but I know tyco uses sap exclusively.
>
> Take care,
>
> Steve
>
> -----Original Message-----
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
> Of Charles Paluska - HPN
> Sent: Tuesday, September 27, 2005 12:31 PM
> To: vantage@yahoogroups.com
> Subject: Re: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress 9.1D?
>
> Steve,
>
> I was thinking you could put your Vantage server and (Citrix or TS)
> behind a
> firewall that only allows port 3389 (RDP) traffic through. That way
> anyone
> needing Vantage access whether through regular gui or ODBC would need to
> access the Citrix server thereby giving you your authentication and
> logging.
> Further isolation could be done by placing an additional NIC in the
> server
> that connects to the "private" subnet the Vantage server is on (with
> routing
> disabled on the Citrix server).
>
> Of course this reduces access to Vantage to TS users only - so
> additional
> licenses would be required.
>
> But if the auditor's concern is the downloading and installation of ODBC
> drivers at the client side - then some type of perimeter needs to be
> setup
> around the Vantage database server. Further complicated by logging
> activity. The password protection changes are another piece of the
> puzzle,
> but it wouldn't take too long for someone (who went out of their way to
> download drivers) to brute force their way through and once they have
> compromised your db then you have no logging of it what so ever.
>
> Also - just a cynical/dark thought - aren't the people who were screwing
> with the books at all these companies that caused the creation of SOX at
> the
> corporate management level that would have the knowledge of the db
> password
> ? I'm mean in reality - isn't SOX alot like not letting babies board
> planes
> because they have the same name as someone on the "Do Not Fly List?" If
> memory serves correct - it wasn't "Bob" in shipping or "Sue" in AR that
> where cooking the books - it was the top people - the very people with
> clearances to access all information (password included) to begin with.
>
> "I'm sorry Mr. Gates, I'm not allowed to let you access your company's
> data!!!" Not even Donald Trump could say "Your Fired" fast enough.
>
> In the end - it really boils down to whim of the auditors. And the fact
> that our legislators spend way too much time keeping honest people from
> doing their jobs efficiently and inexpensively - while the criminals
> just
> laugh because they are outside the system already.
>
> Have Fun, (this should generate some spirited debate)
>
> Charles
>
> ----- Original Message -----
> From: "Steve Wirch" <wirch@...>
> To: <vantage@yahoogroups.com>
> Sent: Tuesday, September 27, 2005 11:23 AM
> Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress
> 9.1D?
>
>
> > Hi Charles,
> >
> > Nope, we do use terminal services for our remote locations though.
> >
> > Does this enter into the considerations?
> >
> > Take care,
> >
> > Steve
> >
> >
> > -----Original Message-----
> > From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
> Behalf
> > Of Charles Paluska - HPN
> > Sent: Tuesday, September 27, 2005 10:27 AM
> > To: vantage@yahoogroups.com
> > Subject: Re: [Vantage] Re: Can ODBC be restricted to Read Only on
> > progress 9.1D?
> >
> > Steve,
> >
> > Are you using Citrix in your shop ?
> >
> > Charles
> >
> > ----- Original Message -----
> > From: "Steve Wirch" <wirch@...>
> > To: <vantage@yahoogroups.com>
> > Sent: Monday, September 26, 2005 4:01 PM
> > Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> > progress
> > 9.1D?
> >
> >
> > > Hi Mario,
> > >
> > > Thanks, but I guess I'm not understanding; out of the box the access
> > > permissions are set on the client. There is no way to prevent
> someone
> > > downloading the merant drivers themselves.
> > >
> > > Our Sarbanes oxley consultants want odbc to be locked down so only
> > known
> > > monitored connections have odbc write access, and that those
> processes
> > > use unique controlled logins and passwords, and are restricted from
> > > writing to any tables that can alter financial calculations, data,
> or
> > > reports. They are finding a lot of companies with open odbc
> > > connections, and I'd be surprised if an auditor didn't catch it.
> > >
> > > Even through gateway connections like access the read_uncommitted is
> > set
> > > on the client that opens the connection. Progress looks at the
> login
> > to
> > > see what permissions they have. The odbc kit says it's a security
> > risk,
> > > it's just that no-one here ever got the kit and read through it.
> > >
> > > I guess I want to make sure and test it to make sure I don't goof up
> > the
> > > crystal forms we still use, the customer connect which needs write
> > > access, the custom asp's that have been written, etc. etc. etc. So
> > far
> > > I've found around 20 odbc pipelines into vantage here. I'll
> probably
> > > find more when I cut off access to the generic login each of them is
> > > using.
> > >
> > > They seem to be ok that we can't check vantage password strength,
> but
> > > would prefer a means of doing that as well.
> > >
> > > Take care,
> > >
> > > Steve
> > >
> > > -----Original Message-----
> > > From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
> > Behalf
> > > Of Mario Aguirre
> > > Sent: Monday, September 26, 2005 3:48 PM
> > > To: vantage@yahoogroups.com
> > > Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> > > progress 9.1D?
> > >
> > > You could always restrict the ODBC settings to the administrator
> only
> > > and have the ODBC connection set to read-only. This way, your users
> > > cannot change the connection, and you as administrator will be able
> to
> > > change the ODBC connection as needed.
> > >
> > > Mario Aguirre
> > > Lakin General Corporation, Inc.
> > >
> > > ________________________________
> > >
> > > From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
> > Behalf
> > > Of Susan Iverson
> > > Sent: Monday, September 26, 2005 2:36 PM
> > > To: vantage@yahoogroups.com
> > > Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> > > progress 9.1D?
> > >
> > >
> > > Can you make a copy of the kit and email it to others or is it too
> > big?
> > > I'm just trying to save Matthew a lot of calls. I knew how to do
> this
> > > once and have since lost track mentally and physically.
> > >
> > >
> > >
> > > Sue
> > >
> > > -----Original Message-----
> > > From: rybermail [mailto:rybermail@...]
> > > Sent: Thursday, September 22, 2005 7:29 AM
> > > To: vantage@yahoogroups.com
> > > Subject: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress
> > > 9.1D?
> > >
> > >
> > >
> > > Hello,
> > >
> > > I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor.
> > The
> > > kit basically shows how to add a user with 'SELECT' permission only.
> > > Due to potential copyright issues it is probably best to get it
> > > directly from epicor. Hope this gets you going in the right
> > direction.
> > >
> > > --- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> > > > Hi,
> > > >
> > > > I've had two bad bits of news in the past two days, hoping someone
> > can
> > > > help out.
> > > >
> > > > Our Sarbanes oxley consultant says that generic odbc logins that
> > have
> > > > the potential for write access are not acceptable. Vantage
> support
> > > says
> > > > they don't think it is possible to restrict the odbc connection to
> > > read
> > > > only.
> > > >
> > > > Is anyone aware of a means to secure the vantage server to be read
> > > only
> > > > on the odbc connection?
> > > >
> > > > Thanks and take care,
> > > >
> > > > Steve
> > >
> > >
> > >
> > >
> > > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
> must
> > > have already linked your email address to a yahoo id to enable
> access.
> > )
> > > (1) To access the Files Section of our Yahoo!Group for Report
> Builder
> > > and Crystal Reports and other 'goodies', please goto:
> > > http://groups.yahoo.com/group/vantage/files/.
> > > <http://groups.yahoo.com/group/vantage/files/>
> > > (2) To search through old msg's goto:
> > > http://groups.yahoo.com/group/vantage/messages
> > > (3) To view links to Vendors that provide Vantage services goto:
> > > http://groups.yahoo.com/group/vantage/links
> > >
> > >
> > >
> > >
> > > SPONSORED LINKS
> > >
> > > Manufacturing software
> > >
> >
> <http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
> > >
> >
> ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
> > >
> >
> are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
> > > atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>
> > >
> > > Membership database software
> > >
> >
> <http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
> > >
> >
> ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
> > >
> >
> +software&w4=Pda+database+software&w5=Database+management+software&w6=On
> > > line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>
> > >
> > > Database mortgage software
> > >
> >
> <http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
> > >
> >
> acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
> > >
> >
> oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
> > > ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>
> > >
> > > Pda database software
> > >
> >
> <http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
> > >
> >
> ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
> > >
> >
> re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
> > > tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>
> > >
> > > Database management software
> > >
> >
> <http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
> > >
> >
> ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
> > >
> >
> +software&w4=Pda+database+software&w5=Database+management+software&w6=On
> > > line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>
> > >
> > > Online database software
> > >
> >
> <http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
> > >
> >
> turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
> > >
> >
> tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
> > > +database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>
> > >
> > >
> > >
> > > _____
> > >
> > > YAHOO! GROUPS LINKS
> > >
> > >
> > >
> > > * Visit your group "vantage
> > > <http://groups.yahoo.com/group/vantage> " on the web.
> > >
> > >
> > > * To unsubscribe from this group, send an email to:
> > > vantage-unsubscribe@yahoogroups.com
> > > <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
> > >
> > >
> > > * Your use of Yahoo! Groups is subject to the Yahoo! Terms
> of
> > > Service <http://docs.yahoo.com/info/terms/> .
> > >
> > >
> > >
> > > _____
> > >
> > >
> > >
> > > [Non-text portions of this message have been removed]
> > >
> > >
> > >
> > > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
> must
> > > have already linked your email address to a yahoo id to enable
> access.
> > )
> > > (1) To access the Files Section of our Yahoo!Group for Report
> Builder
> > > and Crystal Reports and other 'goodies', please goto:
> > > http://groups.yahoo.com/group/vantage/files/.
> > > (2) To search through old msg's goto:
> > > http://groups.yahoo.com/group/vantage/messages
> > > (3) To view links to Vendors that provide Vantage services goto:
> > > http://groups.yahoo.com/group/vantage/links
> > >
> > >
> > >
> > > ________________________________
> > >
> > > YAHOO! GROUPS LINKS
> > >
> > >
> > >
> > > * Visit your group "vantage
> > > <http://groups.yahoo.com/group/vantage> " on the web.
> > >
> > > * To unsubscribe from this group, send an email to:
> > > vantage-unsubscribe@yahoogroups.com
> > > <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
> > >
> > > * Your use of Yahoo! Groups is subject to the Yahoo! Terms of
> > > Service <http://docs.yahoo.com/info/terms/> .
> > >
> > >
> > > ________________________________
> > >
> > >
> > >
> > >
> > > [Non-text portions of this message have been removed]
> > >
> > >
> > >
> > >
> > > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
> must
> > > have already linked your email address to a yahoo id to enable
> access.
> > )
> > > (1) To access the Files Section of our Yahoo!Group for Report
> Builder
> > > and Crystal Reports and other 'goodies', please goto:
> > > http://groups.yahoo.com/group/vantage/files/.
> > > (2) To search through old msg's goto:
> > > http://groups.yahoo.com/group/vantage/messages
> > > (3) To view links to Vendors that provide Vantage services goto:
> > > http://groups.yahoo.com/group/vantage/links
> > > Yahoo! Groups Links
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
> must
> > have already linked your email address to a yahoo id to enable access.
> )
> > > (1) To access the Files Section of our Yahoo!Group for Report
> Builder
> > and
> > Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/links
> > > Yahoo! Groups Links
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> >
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> > have already linked your email address to a yahoo id to enable access.
> )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder
> > and Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/links
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder
> and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
> >
> >
> >
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder
> and Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>
Hi,

I've had two bad bits of news in the past two days, hoping someone can
help out.

Our Sarbanes oxley consultant says that generic odbc logins that have
the potential for write access are not acceptable. Vantage support says
they don't think it is possible to restrict the odbc connection to read
only.

Is anyone aware of a means to secure the vantage server to be read only
on the odbc connection?

Thanks and take care,

Steve
Hello,

I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
kit basically shows how to add a user with 'SELECT' permission only.
Due to potential copyright issues it is probably best to get it
directly from epicor. Hope this gets you going in the right direction.

--- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> Hi,
>
> I've had two bad bits of news in the past two days, hoping someone can
> help out.
>
> Our Sarbanes oxley consultant says that generic odbc logins that have
> the potential for write access are not acceptable. Vantage support
says
> they don't think it is possible to restrict the odbc connection to
read
> only.
>
> Is anyone aware of a means to secure the vantage server to be read
only
> on the odbc connection?
>
> Thanks and take care,
>
> Steve
Thanks! I'll do that. Take care, Steve

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of rybermail
Sent: Thursday, September 22, 2005 10:29 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?

Hello,

I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
kit basically shows how to add a user with 'SELECT' permission only.
Due to potential copyright issues it is probably best to get it
directly from epicor. Hope this gets you going in the right direction.

--- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> Hi,
>
> I've had two bad bits of news in the past two days, hoping someone can
> help out.
>
> Our Sarbanes oxley consultant says that generic odbc logins that have
> the potential for write access are not acceptable. Vantage support
says
> they don't think it is possible to restrict the odbc connection to
read
> only.
>
> Is anyone aware of a means to secure the vantage server to be read
only
> on the odbc connection?
>
> Thanks and take care,
>
> Steve





Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links
Possible alternative approach....if you don't need up to the minute real-time reporting:
Backup live database and restore to a reporting database on a regular basis (nightly). Then set the ODBC access to the reporting DB. If they write to it, so what, it will get overwritten on the next refresh. Use different passwords on each DB so they can't build their own connection to the live one (if they knoe how). Cost would be disk space for duplicate DB. I don't know all the details of setting up the DSN parts but it might be an avenue to check out.
-Todd C.

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com]On Behalf Of Steve Wirch
Sent: Thursday, September 22, 2005 9:18 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Can ODBC be restricted to Read Only on progress 9.1D?


Hi,

I've had two bad bits of news in the past two days, hoping someone can
help out.

Our Sarbanes oxley consultant says that generic odbc logins that have
the potential for write access are not acceptable. Vantage support says
they don't think it is possible to restrict the odbc connection to read
only.

Is anyone aware of a means to secure the vantage server to be read only
on the odbc connection?

Thanks and take care,

Steve



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS
Manufacturing <http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufacturing+software&w2=Membership+database+software&w3=Database+mortgage+software&w4=Pda+database+software&w5=Database+management+software&w6=Online+database+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ> software Membership <http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Manufacturing+software&w2=Membership+database+software&w3=Database+mortgage+software&w4=Pda+database+software&w5=Database+management+software&w6=Online+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A> database software Database <http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manufacturing+software&w2=Membership+database+software&w3=Database+mortgage+software&w4=Pda+database+software&w5=Database+management+software&w6=Online+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw> mortgage software
Pda <http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufacturing+software&w2=Membership+database+software&w3=Database+mortgage+software&w4=Pda+database+software&w5=Database+management+software&w6=Online+database+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ> database software Database <http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Manufacturing+software&w2=Membership+database+software&w3=Database+mortgage+software&w4=Pda+database+software&w5=Database+management+software&w6=Online+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw> management software Online <http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufacturing+software&w2=Membership+database+software&w3=Database+mortgage+software&w4=Pda+database+software&w5=Database+management+software&w6=Online+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA> database software

_____

YAHOO! GROUPS LINKS



* Visit your group " vantage <http://groups.yahoo.com/group/vantage> " on the web.


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service <http://docs.yahoo.com/info/terms/> .


_____




[Non-text portions of this message have been removed]
Actually, you can create a data warehouse of specific data that is needed
for ODBC to conserve space if that is an issue.

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of
Steve Wirch
Sent: Thursday, September 22, 2005 10:34 AM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?


Thanks! I'll do that. Take care, Steve

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of
rybermail
Sent: Thursday, September 22, 2005 10:29 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress 9.1D?

Hello,

I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
kit basically shows how to add a user with 'SELECT' permission only. Due to
potential copyright issues it is probably best to get it
directly from epicor. Hope this gets you going in the right direction.

--- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> Hi,
>
> I've had two bad bits of news in the past two days, hoping someone can
> help out.
>
> Our Sarbanes oxley consultant says that generic odbc logins that have
> the potential for write access are not acceptable. Vantage support
says
> they don't think it is possible to restrict the odbc connection to
read
> only.
>
> Is anyone aware of a means to secure the vantage server to be read
only
> on the odbc connection?
>
> Thanks and take care,
>
> Steve





Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links










Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links
We also had that same topic with our SOX audit. If you follow the
instructions in the odbc kit you should pass the audit ok. Make sure you
change the sysprogress password.



Judd

Custom Hoists, Inc.



-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Steve Wirch
Sent: Thursday, September 22, 2005 10:18 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Can ODBC be restricted to Read Only on progress 9.1D?



Hi,

I've had two bad bits of news in the past two days, hoping someone can
help out.

Our Sarbanes oxley consultant says that generic odbc logins that have
the potential for write access are not acceptable. Vantage support says
they don't think it is possible to restrict the odbc connection to read
only.

Is anyone aware of a means to secure the vantage server to be read only
on the odbc connection?

Thanks and take care,

Steve



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS

Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>

Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>

Database mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>

Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>

Database management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>

Online database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>



________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .



________________________________



[Non-text portions of this message have been removed]
I only use Access for reporting and do a couple of things to lock down
the tables: 1) I pre-link the tables a user needs and store the password
so noboby knows it but me. 2) I set the ODBC driver to Read Uncommitted
- if you try to change a record you get an error "Statement now allowed
in readonly isolation level". 3) I use Access workgroup security to make
all linked tables read-only.



Butch



________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Steve Wirch
Sent: Thursday, September 22, 2005 7:18 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Can ODBC be restricted to Read Only on progress 9.1D?



Hi,

I've had two bad bits of news in the past two days, hoping someone can
help out.

Our Sarbanes oxley consultant says that generic odbc logins that have
the potential for write access are not acceptable. Vantage support says
they don't think it is possible to restrict the odbc connection to read
only.

Is anyone aware of a means to secure the vantage server to be read only
on the odbc connection?

Thanks and take care,

Steve



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS

Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>

Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>

Database mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>

Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>

Database management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>

Online database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>



________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .



________________________________



[Non-text portions of this message have been removed]
Can you make a copy of the kit and email it to others or is it too big?
I'm just trying to save Matthew a lot of calls. I knew how to do this
once and have since lost track mentally and physically.



Sue

-----Original Message-----
From: rybermail [mailto:rybermail@...]
Sent: Thursday, September 22, 2005 7:29 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?



Hello,

I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
kit basically shows how to add a user with 'SELECT' permission only.
Due to potential copyright issues it is probably best to get it
directly from epicor. Hope this gets you going in the right direction.

--- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> Hi,
>
> I've had two bad bits of news in the past two days, hoping someone can
> help out.
>
> Our Sarbanes oxley consultant says that generic odbc logins that have
> the potential for write access are not acceptable. Vantage support
says
> they don't think it is possible to restrict the odbc connection to
read
> only.
>
> Is anyone aware of a means to secure the vantage server to be read
only
> on the odbc connection?
>
> Thanks and take care,
>
> Steve




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS

Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>

Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>

Database mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>

Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>

Database management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>

Online database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>



_____

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .



_____



[Non-text portions of this message have been removed]
Hi Sue, next time I'm on the phone with support I'll ask them to post it
on their download site. Take care, Steve

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Susan Iverson
Sent: Monday, September 26, 2005 3:36 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?

Can you make a copy of the kit and email it to others or is it too big?
I'm just trying to save Matthew a lot of calls. I knew how to do this
once and have since lost track mentally and physically.



Sue

-----Original Message-----
From: rybermail [mailto:rybermail@...]
Sent: Thursday, September 22, 2005 7:29 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?



Hello,

I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
kit basically shows how to add a user with 'SELECT' permission only.
Due to potential copyright issues it is probably best to get it
directly from epicor. Hope this gets you going in the right direction.

--- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> Hi,
>
> I've had two bad bits of news in the past two days, hoping someone can
> help out.
>
> Our Sarbanes oxley consultant says that generic odbc logins that have
> the potential for write access are not acceptable. Vantage support
says
> they don't think it is possible to restrict the odbc connection to
read
> only.
>
> Is anyone aware of a means to secure the vantage server to be read
only
> on the odbc connection?
>
> Thanks and take care,
>
> Steve




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS

Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>

Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>

Database mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>

Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>

Database management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>

Online database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>



_____

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .



_____



[Non-text portions of this message have been removed]




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links
You could always restrict the ODBC settings to the administrator only
and have the ODBC connection set to read-only. This way, your users
cannot change the connection, and you as administrator will be able to
change the ODBC connection as needed.

Mario Aguirre
Lakin General Corporation, Inc.

________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Susan Iverson
Sent: Monday, September 26, 2005 2:36 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?


Can you make a copy of the kit and email it to others or is it too big?
I'm just trying to save Matthew a lot of calls. I knew how to do this
once and have since lost track mentally and physically.



Sue

-----Original Message-----
From: rybermail [mailto:rybermail@...]
Sent: Thursday, September 22, 2005 7:29 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?



Hello,

I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
kit basically shows how to add a user with 'SELECT' permission only.
Due to potential copyright issues it is probably best to get it
directly from epicor. Hope this gets you going in the right direction.

--- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> Hi,
>
> I've had two bad bits of news in the past two days, hoping someone can
> help out.
>
> Our Sarbanes oxley consultant says that generic odbc logins that have
> the potential for write access are not acceptable. Vantage support
says
> they don't think it is possible to restrict the odbc connection to
read
> only.
>
> Is anyone aware of a means to secure the vantage server to be read
only
> on the odbc connection?
>
> Thanks and take care,
>
> Steve




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS

Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>

Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>

Database mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>

Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>

Database management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>

Online database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>



_____

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .



_____



[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links



________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .


________________________________




[Non-text portions of this message have been removed]
Hi Mario,

Thanks, but I guess I'm not understanding; out of the box the access
permissions are set on the client. There is no way to prevent someone
downloading the merant drivers themselves.

Our Sarbanes oxley consultants want odbc to be locked down so only known
monitored connections have odbc write access, and that those processes
use unique controlled logins and passwords, and are restricted from
writing to any tables that can alter financial calculations, data, or
reports. They are finding a lot of companies with open odbc
connections, and I'd be surprised if an auditor didn't catch it.

Even through gateway connections like access the read_uncommitted is set
on the client that opens the connection. Progress looks at the login to
see what permissions they have. The odbc kit says it's a security risk,
it's just that no-one here ever got the kit and read through it.

I guess I want to make sure and test it to make sure I don't goof up the
crystal forms we still use, the customer connect which needs write
access, the custom asp's that have been written, etc. etc. etc. So far
I've found around 20 odbc pipelines into vantage here. I'll probably
find more when I cut off access to the generic login each of them is
using.

They seem to be ok that we can't check vantage password strength, but
would prefer a means of doing that as well.

Take care,

Steve

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Mario Aguirre
Sent: Monday, September 26, 2005 3:48 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?

You could always restrict the ODBC settings to the administrator only
and have the ODBC connection set to read-only. This way, your users
cannot change the connection, and you as administrator will be able to
change the ODBC connection as needed.

Mario Aguirre
Lakin General Corporation, Inc.

________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Susan Iverson
Sent: Monday, September 26, 2005 2:36 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?


Can you make a copy of the kit and email it to others or is it too big?
I'm just trying to save Matthew a lot of calls. I knew how to do this
once and have since lost track mentally and physically.



Sue

-----Original Message-----
From: rybermail [mailto:rybermail@...]
Sent: Thursday, September 22, 2005 7:29 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?



Hello,

I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
kit basically shows how to add a user with 'SELECT' permission only.
Due to potential copyright issues it is probably best to get it
directly from epicor. Hope this gets you going in the right direction.

--- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> Hi,
>
> I've had two bad bits of news in the past two days, hoping someone can
> help out.
>
> Our Sarbanes oxley consultant says that generic odbc logins that have
> the potential for write access are not acceptable. Vantage support
says
> they don't think it is possible to restrict the odbc connection to
read
> only.
>
> Is anyone aware of a means to secure the vantage server to be read
only
> on the odbc connection?
>
> Thanks and take care,
>
> Steve




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS

Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>

Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>

Database mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>

Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>

Database management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>

Online database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>



_____

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .



_____



[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links



________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .


________________________________




[Non-text portions of this message have been removed]




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links
Steve,

Access, Crystal and any other software run on the client use the same
connection. To set up / change the ODBC connection, you need to have
access to Control Panel/Administrative Tools/Data Sources. You can apply
windows security to Data Sources so the user can connect to Vantage, yet
they cannot change settings (write instead of read) at the individual
machine. Also, you could change the password in the ODBC connection used
to connect to Vantage and disclose it to specific users, thus
controlling who is accessing the connection. I personally have several
databases that I restrict the user on accessing macros. In the macros,
there are all the connections and passwords required to refresh info
from Vantage. The user click on a button, and anything needed from
Vantage is brought without their intervention, knowledge of passwords or
odbc connections.

Good luck!

Mario Aguirre
Information Systems Manager
Lakin General Corporation, Inc.
Phone: 773-871-9643
Fax: 773-871-6675


________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Steve Wirch
Sent: Monday, September 26, 2005 3:02 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?


Hi Mario,

Thanks, but I guess I'm not understanding; out of the box the access
permissions are set on the client. There is no way to prevent someone
downloading the merant drivers themselves.

Our Sarbanes oxley consultants want odbc to be locked down so only known
monitored connections have odbc write access, and that those processes
use unique controlled logins and passwords, and are restricted from
writing to any tables that can alter financial calculations, data, or
reports. They are finding a lot of companies with open odbc
connections, and I'd be surprised if an auditor didn't catch it.

Even through gateway connections like access the read_uncommitted is set
on the client that opens the connection. Progress looks at the login to
see what permissions they have. The odbc kit says it's a security risk,
it's just that no-one here ever got the kit and read through it.

I guess I want to make sure and test it to make sure I don't goof up the
crystal forms we still use, the customer connect which needs write
access, the custom asp's that have been written, etc. etc. etc. So far
I've found around 20 odbc pipelines into vantage here. I'll probably
find more when I cut off access to the generic login each of them is
using.

They seem to be ok that we can't check vantage password strength, but
would prefer a means of doing that as well.

Take care,

Steve

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Mario Aguirre
Sent: Monday, September 26, 2005 3:48 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?

You could always restrict the ODBC settings to the administrator only
and have the ODBC connection set to read-only. This way, your users
cannot change the connection, and you as administrator will be able to
change the ODBC connection as needed.

Mario Aguirre
Lakin General Corporation, Inc.

________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Susan Iverson
Sent: Monday, September 26, 2005 2:36 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?


Can you make a copy of the kit and email it to others or is it too big?
I'm just trying to save Matthew a lot of calls. I knew how to do this
once and have since lost track mentally and physically.



Sue

-----Original Message-----
From: rybermail [mailto:rybermail@...]
Sent: Thursday, September 22, 2005 7:29 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?



Hello,

I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
kit basically shows how to add a user with 'SELECT' permission only.
Due to potential copyright issues it is probably best to get it
directly from epicor. Hope this gets you going in the right direction.

--- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> Hi,
>
> I've had two bad bits of news in the past two days, hoping someone can
> help out.
>
> Our Sarbanes oxley consultant says that generic odbc logins that have
> the potential for write access are not acceptable. Vantage support
says
> they don't think it is possible to restrict the odbc connection to
read
> only.
>
> Is anyone aware of a means to secure the vantage server to be read
only
> on the odbc connection?
>
> Thanks and take care,
>
> Steve




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS

Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>

Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>

Database mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>

Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>

Database management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>

Online database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>



_____

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .



_____



[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links



________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .


________________________________




[Non-text portions of this message have been removed]




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links








Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS
Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>
Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A> Database
mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>
Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ> Database
management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw> Online
database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>

________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .


________________________________




[Non-text portions of this message have been removed]
Hi Mario,

That's what I thought, but not good enough.

The Sarbanes (sox) auditors didn't even want to hear about control panel
access, their only response was "can you download the drivers over the
internet?". Did you get a different read from your sox auditor? It
would be sort of nice to know how consistent they are.

They also want all new systems changes to financials systems tested,
documented, and under full change control. Since this is a "significant
change" I'm supposed to do it on a test system first, have the business
users sign off, then release it to the live system. I tried to tell
them I didn't have a separate vantage test server because I hadn't
loaded any vantage patches since last December. Guess what I have
coming in next week? A new server.

These guys are pretty serious. I wouldn't count on macros's with
embedded passwords on open connections passing even if you've secured
the macro. Remember that "warning, user id's and passwords are not
encrypted" message? They made it pretty clear that user ignorance was
not a security model. They wanted to hear about active directory
security models, "strong passwords" and unique user id's when they
weren't preaching about documentation and change control. I'm trying to
keep a lot of systems "out of scope" by restricting their access away
from financials tables via the odbc user definition.

I've noticed some threads about crystal going to xml; I'm presuming this
means they are using a web service instead of odbc? If it's the jdbc
driver that has read-write capability the same as odbc and will need
configuration. If web services, what security is on that? Are they
using windows authentication? If anyone knows I'd appreciate some more
info.

Take care,

Steve


-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Mario Aguirre
Sent: Monday, September 26, 2005 4:33 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?

Steve,

Access, Crystal and any other software run on the client use the same
connection. To set up / change the ODBC connection, you need to have
access to Control Panel/Administrative Tools/Data Sources. You can apply
windows security to Data Sources so the user can connect to Vantage, yet
they cannot change settings (write instead of read) at the individual
machine. Also, you could change the password in the ODBC connection used
to connect to Vantage and disclose it to specific users, thus
controlling who is accessing the connection. I personally have several
databases that I restrict the user on accessing macros. In the macros,
there are all the connections and passwords required to refresh info
from Vantage. The user click on a button, and anything needed from
Vantage is brought without their intervention, knowledge of passwords or
odbc connections.

Good luck!

Mario Aguirre
Information Systems Manager
Lakin General Corporation, Inc.
Phone: 773-871-9643
Fax: 773-871-6675


________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Steve Wirch
Sent: Monday, September 26, 2005 3:02 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?


Hi Mario,

Thanks, but I guess I'm not understanding; out of the box the access
permissions are set on the client. There is no way to prevent someone
downloading the merant drivers themselves.

Our Sarbanes oxley consultants want odbc to be locked down so only known
monitored connections have odbc write access, and that those processes
use unique controlled logins and passwords, and are restricted from
writing to any tables that can alter financial calculations, data, or
reports. They are finding a lot of companies with open odbc
connections, and I'd be surprised if an auditor didn't catch it.

Even through gateway connections like access the read_uncommitted is set
on the client that opens the connection. Progress looks at the login to
see what permissions they have. The odbc kit says it's a security risk,
it's just that no-one here ever got the kit and read through it.

I guess I want to make sure and test it to make sure I don't goof up the
crystal forms we still use, the customer connect which needs write
access, the custom asp's that have been written, etc. etc. etc. So far
I've found around 20 odbc pipelines into vantage here. I'll probably
find more when I cut off access to the generic login each of them is
using.

They seem to be ok that we can't check vantage password strength, but
would prefer a means of doing that as well.

Take care,

Steve

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Mario Aguirre
Sent: Monday, September 26, 2005 3:48 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?

You could always restrict the ODBC settings to the administrator only
and have the ODBC connection set to read-only. This way, your users
cannot change the connection, and you as administrator will be able to
change the ODBC connection as needed.

Mario Aguirre
Lakin General Corporation, Inc.

________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Susan Iverson
Sent: Monday, September 26, 2005 2:36 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?


Can you make a copy of the kit and email it to others or is it too big?
I'm just trying to save Matthew a lot of calls. I knew how to do this
once and have since lost track mentally and physically.



Sue

-----Original Message-----
From: rybermail [mailto:rybermail@...]
Sent: Thursday, September 22, 2005 7:29 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?



Hello,

I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
kit basically shows how to add a user with 'SELECT' permission only.
Due to potential copyright issues it is probably best to get it
directly from epicor. Hope this gets you going in the right direction.

--- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> Hi,
>
> I've had two bad bits of news in the past two days, hoping someone can
> help out.
>
> Our Sarbanes oxley consultant says that generic odbc logins that have
> the potential for write access are not acceptable. Vantage support
says
> they don't think it is possible to restrict the odbc connection to
read
> only.
>
> Is anyone aware of a means to secure the vantage server to be read
only
> on the odbc connection?
>
> Thanks and take care,
>
> Steve




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS

Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>

Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>

Database mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>

Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>

Database management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>

Online database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>



_____

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .



_____



[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links



________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .


________________________________




[Non-text portions of this message have been removed]




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links








Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS
Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>
Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A> Database
mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>
Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ> Database
management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw> Online
database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>

________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .


________________________________




[Non-text portions of this message have been removed]




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links
Steve,

Are you using Citrix in your shop ?

Charles

----- Original Message -----
From: "Steve Wirch" <wirch@...>
To: <vantage@yahoogroups.com>
Sent: Monday, September 26, 2005 4:01 PM
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?


> Hi Mario,
>
> Thanks, but I guess I'm not understanding; out of the box the access
> permissions are set on the client. There is no way to prevent someone
> downloading the merant drivers themselves.
>
> Our Sarbanes oxley consultants want odbc to be locked down so only known
> monitored connections have odbc write access, and that those processes
> use unique controlled logins and passwords, and are restricted from
> writing to any tables that can alter financial calculations, data, or
> reports. They are finding a lot of companies with open odbc
> connections, and I'd be surprised if an auditor didn't catch it.
>
> Even through gateway connections like access the read_uncommitted is set
> on the client that opens the connection. Progress looks at the login to
> see what permissions they have. The odbc kit says it's a security risk,
> it's just that no-one here ever got the kit and read through it.
>
> I guess I want to make sure and test it to make sure I don't goof up the
> crystal forms we still use, the customer connect which needs write
> access, the custom asp's that have been written, etc. etc. etc. So far
> I've found around 20 odbc pipelines into vantage here. I'll probably
> find more when I cut off access to the generic login each of them is
> using.
>
> They seem to be ok that we can't check vantage password strength, but
> would prefer a means of doing that as well.
>
> Take care,
>
> Steve
>
> -----Original Message-----
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
> Of Mario Aguirre
> Sent: Monday, September 26, 2005 3:48 PM
> To: vantage@yahoogroups.com
> Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress 9.1D?
>
> You could always restrict the ODBC settings to the administrator only
> and have the ODBC connection set to read-only. This way, your users
> cannot change the connection, and you as administrator will be able to
> change the ODBC connection as needed.
>
> Mario Aguirre
> Lakin General Corporation, Inc.
>
> ________________________________
>
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
> Of Susan Iverson
> Sent: Monday, September 26, 2005 2:36 PM
> To: vantage@yahoogroups.com
> Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress 9.1D?
>
>
> Can you make a copy of the kit and email it to others or is it too big?
> I'm just trying to save Matthew a lot of calls. I knew how to do this
> once and have since lost track mentally and physically.
>
>
>
> Sue
>
> -----Original Message-----
> From: rybermail [mailto:rybermail@...]
> Sent: Thursday, September 22, 2005 7:29 AM
> To: vantage@yahoogroups.com
> Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
> 9.1D?
>
>
>
> Hello,
>
> I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
> kit basically shows how to add a user with 'SELECT' permission only.
> Due to potential copyright issues it is probably best to get it
> directly from epicor. Hope this gets you going in the right direction.
>
> --- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> > Hi,
> >
> > I've had two bad bits of news in the past two days, hoping someone can
> > help out.
> >
> > Our Sarbanes oxley consultant says that generic odbc logins that have
> > the potential for write access are not acceptable. Vantage support
> says
> > they don't think it is possible to restrict the odbc connection to
> read
> > only.
> >
> > Is anyone aware of a means to secure the vantage server to be read
> only
> > on the odbc connection?
> >
> > Thanks and take care,
> >
> > Steve
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder
> and Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> <http://groups.yahoo.com/group/vantage/files/>
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
>
>
>
>
> SPONSORED LINKS
>
> Manufacturing software
> <http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
> ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
> are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
> atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>
>
> Membership database software
> <http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
> ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
> +software&w4=Pda+database+software&w5=Database+management+software&w6=On
> line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>
>
> Database mortgage software
> <http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
> acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
> oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
> ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>
>
> Pda database software
> <http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
> ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
> re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
> tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>
>
> Database management software
> <http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
> ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
> +software&w4=Pda+database+software&w5=Database+management+software&w6=On
> line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>
>
> Online database software
> <http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
> turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
> tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
> +database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>
>
>
>
> _____
>
> YAHOO! GROUPS LINKS
>
>
>
> * Visit your group "vantage
> <http://groups.yahoo.com/group/vantage> " on the web.
>
>
> * To unsubscribe from this group, send an email to:
> vantage-unsubscribe@yahoogroups.com
> <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
>
>
> * Your use of Yahoo! Groups is subject to the Yahoo! Terms of
> Service <http://docs.yahoo.com/info/terms/> .
>
>
>
> _____
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder
> and Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
>
>
>
> ________________________________
>
> YAHOO! GROUPS LINKS
>
>
>
> * Visit your group "vantage
> <http://groups.yahoo.com/group/vantage> " on the web.
>
> * To unsubscribe from this group, send an email to:
> vantage-unsubscribe@yahoogroups.com
> <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
>
> * Your use of Yahoo! Groups is subject to the Yahoo! Terms of
> Service <http://docs.yahoo.com/info/terms/> .
>
>
> ________________________________
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder
> and Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
Steve,

D&T did our SOX audit, We changed the sysprogress password and created a
new account with a new password on the database.

The second account has only read-only rights to all the tables. Then
make sure you change the mfgsysuser and password in your mfg file to
match the read-only

Account. Our Auditors agreed this was in our guidelines. Make sure you
have the read-only user documented in your user access forms signed by
management as well as

In your narrative.





Judd

Custom Hoists, Inc.



-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Steve Wirch
Sent: Monday, September 26, 2005 5:29 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?



Hi Mario,

That's what I thought, but not good enough.

The Sarbanes (sox) auditors didn't even want to hear about control panel
access, their only response was "can you download the drivers over the
internet?". Did you get a different read from your sox auditor? It
would be sort of nice to know how consistent they are.

They also want all new systems changes to financials systems tested,
documented, and under full change control. Since this is a "significant
change" I'm supposed to do it on a test system first, have the business
users sign off, then release it to the live system. I tried to tell
them I didn't have a separate vantage test server because I hadn't
loaded any vantage patches since last December. Guess what I have
coming in next week? A new server.

These guys are pretty serious. I wouldn't count on macros's with
embedded passwords on open connections passing even if you've secured
the macro. Remember that "warning, user id's and passwords are not
encrypted" message? They made it pretty clear that user ignorance was
not a security model. They wanted to hear about active directory
security models, "strong passwords" and unique user id's when they
weren't preaching about documentation and change control. I'm trying to
keep a lot of systems "out of scope" by restricting their access away
from financials tables via the odbc user definition.

I've noticed some threads about crystal going to xml; I'm presuming this
means they are using a web service instead of odbc? If it's the jdbc
driver that has read-write capability the same as odbc and will need
configuration. If web services, what security is on that? Are they
using windows authentication? If anyone knows I'd appreciate some more
info.

Take care,

Steve


-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Mario Aguirre
Sent: Monday, September 26, 2005 4:33 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?

Steve,

Access, Crystal and any other software run on the client use the same
connection. To set up / change the ODBC connection, you need to have
access to Control Panel/Administrative Tools/Data Sources. You can apply
windows security to Data Sources so the user can connect to Vantage, yet
they cannot change settings (write instead of read) at the individual
machine. Also, you could change the password in the ODBC connection used
to connect to Vantage and disclose it to specific users, thus
controlling who is accessing the connection. I personally have several
databases that I restrict the user on accessing macros. In the macros,
there are all the connections and passwords required to refresh info
from Vantage. The user click on a button, and anything needed from
Vantage is brought without their intervention, knowledge of passwords or
odbc connections.

Good luck!

Mario Aguirre
Information Systems Manager
Lakin General Corporation, Inc.
Phone: 773-871-9643
Fax: 773-871-6675


________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Steve Wirch
Sent: Monday, September 26, 2005 3:02 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?


Hi Mario,

Thanks, but I guess I'm not understanding; out of the box the access
permissions are set on the client. There is no way to prevent someone
downloading the merant drivers themselves.

Our Sarbanes oxley consultants want odbc to be locked down so only known
monitored connections have odbc write access, and that those processes
use unique controlled logins and passwords, and are restricted from
writing to any tables that can alter financial calculations, data, or
reports. They are finding a lot of companies with open odbc
connections, and I'd be surprised if an auditor didn't catch it.

Even through gateway connections like access the read_uncommitted is set
on the client that opens the connection. Progress looks at the login to
see what permissions they have. The odbc kit says it's a security risk,
it's just that no-one here ever got the kit and read through it.

I guess I want to make sure and test it to make sure I don't goof up the
crystal forms we still use, the customer connect which needs write
access, the custom asp's that have been written, etc. etc. etc. So far
I've found around 20 odbc pipelines into vantage here. I'll probably
find more when I cut off access to the generic login each of them is
using.

They seem to be ok that we can't check vantage password strength, but
would prefer a means of doing that as well.

Take care,

Steve

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Mario Aguirre
Sent: Monday, September 26, 2005 3:48 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?

You could always restrict the ODBC settings to the administrator only
and have the ODBC connection set to read-only. This way, your users
cannot change the connection, and you as administrator will be able to
change the ODBC connection as needed.

Mario Aguirre
Lakin General Corporation, Inc.

________________________________

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Susan Iverson
Sent: Monday, September 26, 2005 2:36 PM
To: vantage@yahoogroups.com
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?


Can you make a copy of the kit and email it to others or is it too big?
I'm just trying to save Matthew a lot of calls. I knew how to do this
once and have since lost track mentally and physically.



Sue

-----Original Message-----
From: rybermail [mailto:rybermail@...]
Sent: Thursday, September 22, 2005 7:29 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?



Hello,

I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor. The
kit basically shows how to add a user with 'SELECT' permission only.
Due to potential copyright issues it is probably best to get it
directly from epicor. Hope this gets you going in the right direction.

--- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> Hi,
>
> I've had two bad bits of news in the past two days, hoping someone can
> help out.
>
> Our Sarbanes oxley consultant says that generic odbc logins that have
> the potential for write access are not acceptable. Vantage support
says
> they don't think it is possible to restrict the odbc connection to
read
> only.
>
> Is anyone aware of a means to secure the vantage server to be read
only
> on the odbc connection?
>
> Thanks and take care,
>
> Steve




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS

Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>

Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>

Database mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>

Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>

Database management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>

Online database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>



_____

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .



_____



[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links



________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .


________________________________




[Non-text portions of this message have been removed]




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links








Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS
Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>
Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>
Database
mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>
Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ> Database
management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>
Online
database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>

________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .


________________________________




[Non-text portions of this message have been removed]




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links








Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links




SPONSORED LINKS

Manufacturing software
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>

Membership database software
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>

Database mortgage software
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>

Pda database software
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>

Database management software
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>

Online database software
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
+database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>



________________________________

YAHOO! GROUPS LINKS



* Visit your group "vantage
<http://groups.yahoo.com/group/vantage> " on the web.


* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>


* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .



________________________________



[Non-text portions of this message have been removed]
Hi Charles,

Nope, we do use terminal services for our remote locations though.

Does this enter into the considerations?

Take care,

Steve


-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Charles Paluska - HPN
Sent: Tuesday, September 27, 2005 10:27 AM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?

Steve,

Are you using Citrix in your shop ?

Charles

----- Original Message -----
From: "Steve Wirch" <wirch@...>
To: <vantage@yahoogroups.com>
Sent: Monday, September 26, 2005 4:01 PM
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress
9.1D?


> Hi Mario,
>
> Thanks, but I guess I'm not understanding; out of the box the access
> permissions are set on the client. There is no way to prevent someone
> downloading the merant drivers themselves.
>
> Our Sarbanes oxley consultants want odbc to be locked down so only
known
> monitored connections have odbc write access, and that those processes
> use unique controlled logins and passwords, and are restricted from
> writing to any tables that can alter financial calculations, data, or
> reports. They are finding a lot of companies with open odbc
> connections, and I'd be surprised if an auditor didn't catch it.
>
> Even through gateway connections like access the read_uncommitted is
set
> on the client that opens the connection. Progress looks at the login
to
> see what permissions they have. The odbc kit says it's a security
risk,
> it's just that no-one here ever got the kit and read through it.
>
> I guess I want to make sure and test it to make sure I don't goof up
the
> crystal forms we still use, the customer connect which needs write
> access, the custom asp's that have been written, etc. etc. etc. So
far
> I've found around 20 odbc pipelines into vantage here. I'll probably
> find more when I cut off access to the generic login each of them is
> using.
>
> They seem to be ok that we can't check vantage password strength, but
> would prefer a means of doing that as well.
>
> Take care,
>
> Steve
>
> -----Original Message-----
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
Behalf
> Of Mario Aguirre
> Sent: Monday, September 26, 2005 3:48 PM
> To: vantage@yahoogroups.com
> Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress 9.1D?
>
> You could always restrict the ODBC settings to the administrator only
> and have the ODBC connection set to read-only. This way, your users
> cannot change the connection, and you as administrator will be able to
> change the ODBC connection as needed.
>
> Mario Aguirre
> Lakin General Corporation, Inc.
>
> ________________________________
>
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
Behalf
> Of Susan Iverson
> Sent: Monday, September 26, 2005 2:36 PM
> To: vantage@yahoogroups.com
> Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress 9.1D?
>
>
> Can you make a copy of the kit and email it to others or is it too
big?
> I'm just trying to save Matthew a lot of calls. I knew how to do this
> once and have since lost track mentally and physically.
>
>
>
> Sue
>
> -----Original Message-----
> From: rybermail [mailto:rybermail@...]
> Sent: Thursday, September 22, 2005 7:29 AM
> To: vantage@yahoogroups.com
> Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
> 9.1D?
>
>
>
> Hello,
>
> I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor.
The
> kit basically shows how to add a user with 'SELECT' permission only.
> Due to potential copyright issues it is probably best to get it
> directly from epicor. Hope this gets you going in the right
direction.
>
> --- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> > Hi,
> >
> > I've had two bad bits of news in the past two days, hoping someone
can
> > help out.
> >
> > Our Sarbanes oxley consultant says that generic odbc logins that
have
> > the potential for write access are not acceptable. Vantage support
> says
> > they don't think it is possible to restrict the odbc connection to
> read
> > only.
> >
> > Is anyone aware of a means to secure the vantage server to be read
> only
> > on the odbc connection?
> >
> > Thanks and take care,
> >
> > Steve
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access.
)
> (1) To access the Files Section of our Yahoo!Group for Report Builder
> and Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> <http://groups.yahoo.com/group/vantage/files/>
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
>
>
>
>
> SPONSORED LINKS
>
> Manufacturing software
>
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
>
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
>
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
> atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>
>
> Membership database software
>
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
>
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
>
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
> line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>
>
> Database mortgage software
>
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
>
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
>
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
> ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>
>
> Pda database software
>
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
>
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
>
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
> tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>
>
> Database management software
>
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
>
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
>
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
> line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>
>
> Online database software
>
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
>
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
>
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
> +database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>
>
>
>
> _____
>
> YAHOO! GROUPS LINKS
>
>
>
> * Visit your group "vantage
> <http://groups.yahoo.com/group/vantage> " on the web.
>
>
> * To unsubscribe from this group, send an email to:
> vantage-unsubscribe@yahoogroups.com
> <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
>
>
> * Your use of Yahoo! Groups is subject to the Yahoo! Terms of
> Service <http://docs.yahoo.com/info/terms/> .
>
>
>
> _____
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access.
)
> (1) To access the Files Section of our Yahoo!Group for Report Builder
> and Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
>
>
>
> ________________________________
>
> YAHOO! GROUPS LINKS
>
>
>
> * Visit your group "vantage
> <http://groups.yahoo.com/group/vantage> " on the web.
>
> * To unsubscribe from this group, send an email to:
> vantage-unsubscribe@yahoogroups.com
> <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
>
> * Your use of Yahoo! Groups is subject to the Yahoo! Terms of
> Service <http://docs.yahoo.com/info/terms/> .
>
>
> ________________________________
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access.
)
> (1) To access the Files Section of our Yahoo!Group for Report Builder
> and Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder
and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links
Steve,

I was thinking you could put your Vantage server and (Citrix or TS) behind a
firewall that only allows port 3389 (RDP) traffic through. That way anyone
needing Vantage access whether through regular gui or ODBC would need to
access the Citrix server thereby giving you your authentication and logging.
Further isolation could be done by placing an additional NIC in the server
that connects to the "private" subnet the Vantage server is on (with routing
disabled on the Citrix server).

Of course this reduces access to Vantage to TS users only - so additional
licenses would be required.

But if the auditor's concern is the downloading and installation of ODBC
drivers at the client side - then some type of perimeter needs to be setup
around the Vantage database server. Further complicated by logging
activity. The password protection changes are another piece of the puzzle,
but it wouldn't take too long for someone (who went out of their way to
download drivers) to brute force their way through and once they have
compromised your db then you have no logging of it what so ever.

Also - just a cynical/dark thought - aren't the people who were screwing
with the books at all these companies that caused the creation of SOX at the
corporate management level that would have the knowledge of the db password
? I'm mean in reality - isn't SOX alot like not letting babies board planes
because they have the same name as someone on the "Do Not Fly List?" If
memory serves correct - it wasn't "Bob" in shipping or "Sue" in AR that
where cooking the books - it was the top people - the very people with
clearances to access all information (password included) to begin with.

"I'm sorry Mr. Gates, I'm not allowed to let you access your company's
data!!!" Not even Donald Trump could say "Your Fired" fast enough.

In the end - it really boils down to whim of the auditors. And the fact
that our legislators spend way too much time keeping honest people from
doing their jobs efficiently and inexpensively - while the criminals just
laugh because they are outside the system already.

Have Fun, (this should generate some spirited debate)

Charles

----- Original Message -----
From: "Steve Wirch" <wirch@...>
To: <vantage@yahoogroups.com>
Sent: Tuesday, September 27, 2005 11:23 AM
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on progress
9.1D?


> Hi Charles,
>
> Nope, we do use terminal services for our remote locations though.
>
> Does this enter into the considerations?
>
> Take care,
>
> Steve
>
>
> -----Original Message-----
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
> Of Charles Paluska - HPN
> Sent: Tuesday, September 27, 2005 10:27 AM
> To: vantage@yahoogroups.com
> Subject: Re: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress 9.1D?
>
> Steve,
>
> Are you using Citrix in your shop ?
>
> Charles
>
> ----- Original Message -----
> From: "Steve Wirch" <wirch@...>
> To: <vantage@yahoogroups.com>
> Sent: Monday, September 26, 2005 4:01 PM
> Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress
> 9.1D?
>
>
> > Hi Mario,
> >
> > Thanks, but I guess I'm not understanding; out of the box the access
> > permissions are set on the client. There is no way to prevent someone
> > downloading the merant drivers themselves.
> >
> > Our Sarbanes oxley consultants want odbc to be locked down so only
> known
> > monitored connections have odbc write access, and that those processes
> > use unique controlled logins and passwords, and are restricted from
> > writing to any tables that can alter financial calculations, data, or
> > reports. They are finding a lot of companies with open odbc
> > connections, and I'd be surprised if an auditor didn't catch it.
> >
> > Even through gateway connections like access the read_uncommitted is
> set
> > on the client that opens the connection. Progress looks at the login
> to
> > see what permissions they have. The odbc kit says it's a security
> risk,
> > it's just that no-one here ever got the kit and read through it.
> >
> > I guess I want to make sure and test it to make sure I don't goof up
> the
> > crystal forms we still use, the customer connect which needs write
> > access, the custom asp's that have been written, etc. etc. etc. So
> far
> > I've found around 20 odbc pipelines into vantage here. I'll probably
> > find more when I cut off access to the generic login each of them is
> > using.
> >
> > They seem to be ok that we can't check vantage password strength, but
> > would prefer a means of doing that as well.
> >
> > Take care,
> >
> > Steve
> >
> > -----Original Message-----
> > From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
> Behalf
> > Of Mario Aguirre
> > Sent: Monday, September 26, 2005 3:48 PM
> > To: vantage@yahoogroups.com
> > Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> > progress 9.1D?
> >
> > You could always restrict the ODBC settings to the administrator only
> > and have the ODBC connection set to read-only. This way, your users
> > cannot change the connection, and you as administrator will be able to
> > change the ODBC connection as needed.
> >
> > Mario Aguirre
> > Lakin General Corporation, Inc.
> >
> > ________________________________
> >
> > From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
> Behalf
> > Of Susan Iverson
> > Sent: Monday, September 26, 2005 2:36 PM
> > To: vantage@yahoogroups.com
> > Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> > progress 9.1D?
> >
> >
> > Can you make a copy of the kit and email it to others or is it too
> big?
> > I'm just trying to save Matthew a lot of calls. I knew how to do this
> > once and have since lost track mentally and physically.
> >
> >
> >
> > Sue
> >
> > -----Original Message-----
> > From: rybermail [mailto:rybermail@...]
> > Sent: Thursday, September 22, 2005 7:29 AM
> > To: vantage@yahoogroups.com
> > Subject: [Vantage] Re: Can ODBC be restricted to Read Only on progress
> > 9.1D?
> >
> >
> >
> > Hello,
> >
> > I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor.
> The
> > kit basically shows how to add a user with 'SELECT' permission only.
> > Due to potential copyright issues it is probably best to get it
> > directly from epicor. Hope this gets you going in the right
> direction.
> >
> > --- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> > > Hi,
> > >
> > > I've had two bad bits of news in the past two days, hoping someone
> can
> > > help out.
> > >
> > > Our Sarbanes oxley consultant says that generic odbc logins that
> have
> > > the potential for write access are not acceptable. Vantage support
> > says
> > > they don't think it is possible to restrict the odbc connection to
> > read
> > > only.
> > >
> > > Is anyone aware of a means to secure the vantage server to be read
> > only
> > > on the odbc connection?
> > >
> > > Thanks and take care,
> > >
> > > Steve
> >
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> > have already linked your email address to a yahoo id to enable access.
> )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder
> > and Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > <http://groups.yahoo.com/group/vantage/files/>
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/links
> >
> >
> >
> >
> > SPONSORED LINKS
> >
> > Manufacturing software
> >
> <http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
> >
> ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
> >
> are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
> > atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>
> >
> > Membership database software
> >
> <http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
> >
> ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
> >
> +software&w4=Pda+database+software&w5=Database+management+software&w6=On
> > line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>
> >
> > Database mortgage software
> >
> <http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
> >
> acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
> >
> oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
> > ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>
> >
> > Pda database software
> >
> <http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
> >
> ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
> >
> re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
> > tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>
> >
> > Database management software
> >
> <http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
> >
> ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
> >
> +software&w4=Pda+database+software&w5=Database+management+software&w6=On
> > line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>
> >
> > Online database software
> >
> <http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
> >
> turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
> >
> tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
> > +database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>
> >
> >
> >
> > _____
> >
> > YAHOO! GROUPS LINKS
> >
> >
> >
> > * Visit your group "vantage
> > <http://groups.yahoo.com/group/vantage> " on the web.
> >
> >
> > * To unsubscribe from this group, send an email to:
> > vantage-unsubscribe@yahoogroups.com
> > <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
> >
> >
> > * Your use of Yahoo! Groups is subject to the Yahoo! Terms of
> > Service <http://docs.yahoo.com/info/terms/> .
> >
> >
> >
> > _____
> >
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> > have already linked your email address to a yahoo id to enable access.
> )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder
> > and Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/links
> >
> >
> >
> > ________________________________
> >
> > YAHOO! GROUPS LINKS
> >
> >
> >
> > * Visit your group "vantage
> > <http://groups.yahoo.com/group/vantage> " on the web.
> >
> > * To unsubscribe from this group, send an email to:
> > vantage-unsubscribe@yahoogroups.com
> > <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
> >
> > * Your use of Yahoo! Groups is subject to the Yahoo! Terms of
> > Service <http://docs.yahoo.com/info/terms/> .
> >
> >
> > ________________________________
> >
> >
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> > have already linked your email address to a yahoo id to enable access.
> )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder
> > and Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/links
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder
> and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
> >
> >
> >
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder
> and Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
Hi Charles,

Very good points, Thanks! One of the compounding problems we have is a
web server that accepts customer orders, and pumps the data, including
new customers and ship-to's into vantage via customer connect and the IM
tables. It does this via odbc, and it's outside the firewall at a
service provider. I don't think we want to interject citrix or ts into
that fray, but I'll check with the web master. Luckily I should be able
to restrict its login to just write access to a couple of IM tables.

On your comments, full agreement here. It's actually looking to me like
the next wave of consulting frenzy behind Six Sigma, Lean manufacturing,
ISO, TQM, etc. etc. etc. All good programs, like sox, but which can way
too readily can spin out of control and hurt the company more than help.


I was surprised to find out that the usage of sap actually triggers
massive additional work. It is "too configurable". Not certain about
worldcom, but I know tyco uses sap exclusively.

Take care,

Steve

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Charles Paluska - HPN
Sent: Tuesday, September 27, 2005 12:31 PM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] Re: Can ODBC be restricted to Read Only on
progress 9.1D?

Steve,

I was thinking you could put your Vantage server and (Citrix or TS)
behind a
firewall that only allows port 3389 (RDP) traffic through. That way
anyone
needing Vantage access whether through regular gui or ODBC would need to
access the Citrix server thereby giving you your authentication and
logging.
Further isolation could be done by placing an additional NIC in the
server
that connects to the "private" subnet the Vantage server is on (with
routing
disabled on the Citrix server).

Of course this reduces access to Vantage to TS users only - so
additional
licenses would be required.

But if the auditor's concern is the downloading and installation of ODBC
drivers at the client side - then some type of perimeter needs to be
setup
around the Vantage database server. Further complicated by logging
activity. The password protection changes are another piece of the
puzzle,
but it wouldn't take too long for someone (who went out of their way to
download drivers) to brute force their way through and once they have
compromised your db then you have no logging of it what so ever.

Also - just a cynical/dark thought - aren't the people who were screwing
with the books at all these companies that caused the creation of SOX at
the
corporate management level that would have the knowledge of the db
password
? I'm mean in reality - isn't SOX alot like not letting babies board
planes
because they have the same name as someone on the "Do Not Fly List?" If
memory serves correct - it wasn't "Bob" in shipping or "Sue" in AR that
where cooking the books - it was the top people - the very people with
clearances to access all information (password included) to begin with.

"I'm sorry Mr. Gates, I'm not allowed to let you access your company's
data!!!" Not even Donald Trump could say "Your Fired" fast enough.

In the end - it really boils down to whim of the auditors. And the fact
that our legislators spend way too much time keeping honest people from
doing their jobs efficiently and inexpensively - while the criminals
just
laugh because they are outside the system already.

Have Fun, (this should generate some spirited debate)

Charles

----- Original Message -----
From: "Steve Wirch" <wirch@...>
To: <vantage@yahoogroups.com>
Sent: Tuesday, September 27, 2005 11:23 AM
Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
progress
9.1D?


> Hi Charles,
>
> Nope, we do use terminal services for our remote locations though.
>
> Does this enter into the considerations?
>
> Take care,
>
> Steve
>
>
> -----Original Message-----
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
Behalf
> Of Charles Paluska - HPN
> Sent: Tuesday, September 27, 2005 10:27 AM
> To: vantage@yahoogroups.com
> Subject: Re: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress 9.1D?
>
> Steve,
>
> Are you using Citrix in your shop ?
>
> Charles
>
> ----- Original Message -----
> From: "Steve Wirch" <wirch@...>
> To: <vantage@yahoogroups.com>
> Sent: Monday, September 26, 2005 4:01 PM
> Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> progress
> 9.1D?
>
>
> > Hi Mario,
> >
> > Thanks, but I guess I'm not understanding; out of the box the access
> > permissions are set on the client. There is no way to prevent
someone
> > downloading the merant drivers themselves.
> >
> > Our Sarbanes oxley consultants want odbc to be locked down so only
> known
> > monitored connections have odbc write access, and that those
processes
> > use unique controlled logins and passwords, and are restricted from
> > writing to any tables that can alter financial calculations, data,
or
> > reports. They are finding a lot of companies with open odbc
> > connections, and I'd be surprised if an auditor didn't catch it.
> >
> > Even through gateway connections like access the read_uncommitted is
> set
> > on the client that opens the connection. Progress looks at the
login
> to
> > see what permissions they have. The odbc kit says it's a security
> risk,
> > it's just that no-one here ever got the kit and read through it.
> >
> > I guess I want to make sure and test it to make sure I don't goof up
> the
> > crystal forms we still use, the customer connect which needs write
> > access, the custom asp's that have been written, etc. etc. etc. So
> far
> > I've found around 20 odbc pipelines into vantage here. I'll
probably
> > find more when I cut off access to the generic login each of them is
> > using.
> >
> > They seem to be ok that we can't check vantage password strength,
but
> > would prefer a means of doing that as well.
> >
> > Take care,
> >
> > Steve
> >
> > -----Original Message-----
> > From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
> Behalf
> > Of Mario Aguirre
> > Sent: Monday, September 26, 2005 3:48 PM
> > To: vantage@yahoogroups.com
> > Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> > progress 9.1D?
> >
> > You could always restrict the ODBC settings to the administrator
only
> > and have the ODBC connection set to read-only. This way, your users
> > cannot change the connection, and you as administrator will be able
to
> > change the ODBC connection as needed.
> >
> > Mario Aguirre
> > Lakin General Corporation, Inc.
> >
> > ________________________________
> >
> > From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
> Behalf
> > Of Susan Iverson
> > Sent: Monday, September 26, 2005 2:36 PM
> > To: vantage@yahoogroups.com
> > Subject: RE: [Vantage] Re: Can ODBC be restricted to Read Only on
> > progress 9.1D?
> >
> >
> > Can you make a copy of the kit and email it to others or is it too
> big?
> > I'm just trying to save Matthew a lot of calls. I knew how to do
this
> > once and have since lost track mentally and physically.
> >
> >
> >
> > Sue
> >
> > -----Original Message-----
> > From: rybermail [mailto:rybermail@...]
> > Sent: Thursday, September 22, 2005 7:29 AM
> > To: vantage@yahoogroups.com
> > Subject: [Vantage] Re: Can ODBC be restricted to Read Only on
progress
> > 9.1D?
> >
> >
> >
> > Hello,
> >
> > I received an "ODBCKit for VN 6.10" from Matthew Cutter at Epicor.
> The
> > kit basically shows how to add a user with 'SELECT' permission only.
> > Due to potential copyright issues it is probably best to get it
> > directly from epicor. Hope this gets you going in the right
> direction.
> >
> > --- In vantage@yahoogroups.com, "Steve Wirch" <wirch@h...> wrote:
> > > Hi,
> > >
> > > I've had two bad bits of news in the past two days, hoping someone
> can
> > > help out.
> > >
> > > Our Sarbanes oxley consultant says that generic odbc logins that
> have
> > > the potential for write access are not acceptable. Vantage
support
> > says
> > > they don't think it is possible to restrict the odbc connection to
> > read
> > > only.
> > >
> > > Is anyone aware of a means to secure the vantage server to be read
> > only
> > > on the odbc connection?
> > >
> > > Thanks and take care,
> > >
> > > Steve
> >
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
must
> > have already linked your email address to a yahoo id to enable
access.
> )
> > (1) To access the Files Section of our Yahoo!Group for Report
Builder
> > and Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > <http://groups.yahoo.com/group/vantage/files/>
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/links
> >
> >
> >
> >
> > SPONSORED LINKS
> >
> > Manufacturing software
> >
>
<http://groups.yahoo.com/gads?t=ms&k=Manufacturing+software&w1=Manufactu
> >
>
ring+software&w2=Membership+database+software&w3=Database+mortgage+softw
> >
>
are&w4=Pda+database+software&w5=Database+management+software&w6=Online+d
> > atabase+software&c=6&s=185&.sig=AvWEwtBBb2CCZUYeLzjLVQ>
> >
> > Membership database software
> >
>
<http://groups.yahoo.com/gads?t=ms&k=Membership+database+software&w1=Man
> >
>
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
> >
>
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
> > line+database+software&c=6&s=185&.sig=8uEu2piLZhrmuaS0aRTs5A>
> >
> > Database mortgage software
> >
>
<http://groups.yahoo.com/gads?t=ms&k=Database+mortgage+software&w1=Manuf
> >
>
acturing+software&w2=Membership+database+software&w3=Database+mortgage+s
> >
>
oftware&w4=Pda+database+software&w5=Database+management+software&w6=Onli
> > ne+database+software&c=6&s=185&.sig=WxJOMUVfawa-Spj4srksIw>
> >
> > Pda database software
> >
>
<http://groups.yahoo.com/gads?t=ms&k=Pda+database+software&w1=Manufactur
> >
>
ing+software&w2=Membership+database+software&w3=Database+mortgage+softwa
> >
>
re&w4=Pda+database+software&w5=Database+management+software&w6=Online+da
> > tabase+software&c=6&s=185&.sig=8c6UocdSpoECWlSALplOdQ>
> >
> > Database management software
> >
>
<http://groups.yahoo.com/gads?t=ms&k=Database+management+software&w1=Man
> >
>
ufacturing+software&w2=Membership+database+software&w3=Database+mortgage
> >
>
+software&w4=Pda+database+software&w5=Database+management+software&w6=On
> > line+database+software&c=6&s=185&.sig=C2nNY1SnmwAiBO61ww9nTw>
> >
> > Online database software
> >
>
<http://groups.yahoo.com/gads?t=ms&k=Online+database+software&w1=Manufac
> >
>
turing+software&w2=Membership+database+software&w3=Database+mortgage+sof
> >
>
tware&w4=Pda+database+software&w5=Database+management+software&w6=Online
> > +database+software&c=6&s=185&.sig=cYursVrba9nF7BBMh8EfUA>
> >
> >
> >
> > _____
> >
> > YAHOO! GROUPS LINKS
> >
> >
> >
> > * Visit your group "vantage
> > <http://groups.yahoo.com/group/vantage> " on the web.
> >
> >
> > * To unsubscribe from this group, send an email to:
> > vantage-unsubscribe@yahoogroups.com
> > <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
> >
> >
> > * Your use of Yahoo! Groups is subject to the Yahoo! Terms
of
> > Service <http://docs.yahoo.com/info/terms/> .
> >
> >
> >
> > _____
> >
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
must
> > have already linked your email address to a yahoo id to enable
access.
> )
> > (1) To access the Files Section of our Yahoo!Group for Report
Builder
> > and Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/links
> >
> >
> >
> > ________________________________
> >
> > YAHOO! GROUPS LINKS
> >
> >
> >
> > * Visit your group "vantage
> > <http://groups.yahoo.com/group/vantage> " on the web.
> >
> > * To unsubscribe from this group, send an email to:
> > vantage-unsubscribe@yahoogroups.com
> > <mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>
> >
> > * Your use of Yahoo! Groups is subject to the Yahoo! Terms of
> > Service <http://docs.yahoo.com/info/terms/> .
> >
> >
> > ________________________________
> >
> >
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
must
> > have already linked your email address to a yahoo id to enable
access.
> )
> > (1) To access the Files Section of our Yahoo!Group for Report
Builder
> > and Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/links
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
must
> have already linked your email address to a yahoo id to enable access.
)
> > (1) To access the Files Section of our Yahoo!Group for Report
Builder
> and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
> >
> >
> >
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access.
)
> (1) To access the Files Section of our Yahoo!Group for Report Builder
> and Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder
and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
> Yahoo! Groups Links
>
>
>
>
>
>
>
>




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links