Database Read Only Access in E811

[benjie]

Dear All,

We need to give a user read only access to the database directly (not thru fat client or web), I have tried "grant select on table to user" but didnt work because the user can update the table.

Can anybody shed a light on this? We are on DB2 UDB 8.1.6.

Thank you,


Benjamin Agupitan

E811 SP1/TR 8.95.R1/DB2 UDB 8.1.6/WIN2003

 

[Sebastian Sajaroff]

Hi,

Probably it's because you forgot to DENY UPDATE, DELETE
and INSERT to that user.

 

[daveschultz]

We are going through this right now as well, and after looking into it, making some changes today. It looks like the system was installed with the Public database user having access to many functions, and then other users inheriting that access from Public. We will be removing the permissions from Public, and then granting them to the other users.

Check what permissions your Public user has for your database.

We are on 8.12 with an Oracle database.

Dave

 

[habarric]

by default, JDE grants all to public for each table when it generates/creates it. To get around this, you must revoke the privileges from public for each table, then grant back to JDE_ROLE or whatever role you have setup, then create a read-only role. This requires on going maintenance for any new tables and also should be a gotcha to watch out for during upgrades, etc. Of course, I've simplified it, but you get the gist.