ODBC Security - 8.03

Hi Scott,



I assume you are using progress, sounds like you need to grant that user
access to the table(s).



1.) Login as a system administrator (sysprogress) via the progress
sql explorer.

2.) Execute a statement like this... GRANT SELECT ON PUB.ShipVia TO
WebAppsPurchasingReq;

3.) Execute a "commitwork".



The above grants select permission to the shipvia table to the progress
login WebAppsPurchasingReq; you will want to substitute your user name.
hint...get a notepad document of the tables, copy and paste statement
2.) above if you want to do a lot of tables...



You could grant access to insert, delete, and update records,...might
not be a good idea...select is "read-only".



If memory serves you need to shut down the process server if you are
using it, and not have any other active sessions for a few seconds while
executing statement 2 above,...i.e. do during off-hours.



If you want to audit which logins have rights to which tables, set up an
odbc excel spreadsheet accessing the _SysTabAuth table. If you are
running payroll it's probably prudent to restrict whom has access to
those tables. Vantages ODBCUSER login has those restricted if memory
serves me correctly.



Take care,



Steve





From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of scott.misonix
Sent: Monday, August 27, 2007 11:37 AM
To: vantage@yahoogroups.com
Subject: [Vantage] ODBC Security - 8.03



We have ODBC set up as per the instructions on the Epicor site, using
the sysprogress account. I have a user that I have to allow ODBC
access for reporting. I don't want to give him the sysprogress ID,
because a) it's the administrative account, and b) has write access to
the database.

I tried to add another ODBC user, but it gets an access denied message
when I connect. I found a tech doc titled "ODBC - Failed to retrieve
data from the database" stating that if you create a new ODBC user,
you must grant select permissions for all tables the user should
access. I can't find any documentation explaining how to do that.

Has anyone done this, or been able to find documentation on the Epicor
site explaining how to do it? I couldn't find any, I'm hesitant to
jump in and tinker much with it. I don't like the idea of modifying a
database that's set up to work with, and came with an application -
especially with a dbms I'm not familiar with. We're still in the
migration stages, and I'd hate to make a change that could have
consequences I'm unaware of down the road.

Thanks,
Scott





[Non-text portions of this message have been removed]
We have ODBC set up as per the instructions on the Epicor site, using
the sysprogress account. I have a user that I have to allow ODBC
access for reporting. I don't want to give him the sysprogress ID,
because a) it's the administrative account, and b) has write access to
the database.

I tried to add another ODBC user, but it gets an access denied message
when I connect. I found a tech doc titled "ODBC - Failed to retrieve
data from the database" stating that if you create a new ODBC user,
you must grant select permissions for all tables the user should
access. I can't find any documentation explaining how to do that.

Has anyone done this, or been able to find documentation on the Epicor
site explaining how to do it? I couldn't find any, I'm hesitant to
jump in and tinker much with it. I don't like the idea of modifying a
database that's set up to work with, and came with an application -
especially with a dbms I'm not familiar with. We're still in the
migration stages, and I'd hate to make a change that could have
consequences I'm unaware of down the road.

Thanks,
Scott