Merant ODBC driver Security setup

Yahoo Archive
1
We're on Vantage 5.0 and have ODBC security implemented. I was
pleasantly suprised on how easy it is to administer. It took a few
calls to Progress tech support to set up (I did it back when I could
talk to Progress directly instead of through Epicor). Basically I had
to add a "SQL Only" server configuration to our database setup in
Progress Explorer. (The normal Vantage installation just has a "4GL
Only" server setup.) Part of the configuration of this new SQL server
group is assigning a new port number that the ODBC clients will use
in their ODBC DSN setups.

The Progress SQL Explorer utility (installed with Vantage Client
Install) is used to administer ODBC (SQL) security. Vantage users
don't have to log in twice but users that want to access Vantage
tables via ODBC have to log in to their SQL accounts with their
assigned SQL usernames and passwords.

We have a power user that likes to create and run Crystal Reports
using ODBC. I've given her read-only rights only to the tables that
she needs for her reports. I haven't given and don't intend to give
anyone anything other than read only rights for ODBC access. Updating
or adding Vantage data via ODBC can be dangerous but I understand
that it's possible with the right precautions.

There's a Progress Knowledge Base article that covers SQL client
administration. I'll see if I can find a link to it if anyone wants
to contact me by email. You can also find pertinent information on
SQL-92 (and Progress in general) at:

http://www.progress.com:6336/dynaweb/psdoc91c/sql9291c/@Generic__Colle
ctionView;cs=default;ts=default;pt=dbase91c

Sorry if wasn't "gentle" enough but this may give you enough
information to help explain to Epicor support what you want to do.

Jerry Dahlinger
Guntert & Zimmerman


--- In vantage@y..., "Troy Funte" <tfunte@e...> wrote:
> There are no NICE solutions that I know of. You can either limit
WHO gets ODBC, or you can initiat another layer of security with
Progress. By adding Progress security, anyone accessing Progress in
any way would have to enter a username and password - which also
means that Vantage users would have to log in TWICE. Not a nice
solution, but it is a solution. You'll have to ask a progress guru
how to actually implement Progress security. I don't know of anyone
who is actually using it either.
>
> Troy Funte
> Liberty Electronics
>
> ----- Original Message -----
> From: pile_of_34
> To: vantage@y...
> Sent: Thursday, January 03, 2002 9:32 AM
> Subject: [Vantage] Merant ODBC driver Security setup
>
>
> Is there anything that can be done to secure and ODBC connection
to
> the Progress database. I am don't like the fact that anyone
running
> the ODBC driver can connect and pull pretty much anything they
want
> if they know where to find it.
>
> Right now the connection string uses no username or password. I
am
> new to vantage and progress so please be gentle.
>
>
> Yahoo! Groups Sponsor
> ADVERTISEMENT
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
must have already linked your email address to a yahoo id to enable
access. )
> (1) To access the Files Section of our Yahoo!Group for Report
Builder and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service.
>
>
>
> [Non-text portions of this message have been removed]
2
Is there anything that can be done to secure and ODBC connection to
the Progress database. I am don't like the fact that anyone running
the ODBC driver can connect and pull pretty much anything they want
if they know where to find it.

Right now the connection string uses no username or password. I am
new to vantage and progress so please be gentle.
3
There are no NICE solutions that I know of. You can either limit WHO gets ODBC, or you can initiat another layer of security with Progress. By adding Progress security, anyone accessing Progress in any way would have to enter a username and password - which also means that Vantage users would have to log in TWICE. Not a nice solution, but it is a solution. You'll have to ask a progress guru how to actually implement Progress security. I don't know of anyone who is actually using it either.

Troy Funte
Liberty Electronics

----- Original Message -----
From: pile_of_34
To: vantage@yahoogroups.com
Sent: Thursday, January 03, 2002 9:32 AM
Subject: [Vantage] Merant ODBC driver Security setup


Is there anything that can be done to secure and ODBC connection to
the Progress database. I am don't like the fact that anyone running
the ODBC driver can connect and pull pretty much anything they want
if they know where to find it.

Right now the connection string uses no username or password. I am
new to vantage and progress so please be gentle.


Yahoo! Groups Sponsor
ADVERTISEMENT




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.



[Non-text portions of this message have been removed]