473,387 Members | 1,398 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,387 software developers and data experts.

DB2 CODE SECURITY??

I am a non-programmer. A programming house is converting my access
database to DB2 to be run on an AS400. The programmers tell me that
DB2 has no way to prevent the user's DB admin from gaining access to
the SQL statements in code. (I find this hard to believe in that I am
able to use MS Access security to hide my code by creating MDE files
and using its built-in user-based security.)

My question: Is this true? If so, how does one protect their code if
written in DB2?

Thanks - Doug

Apr 21 '07 #1
3 1364
DG******@AOL.COM wrote:
I am a non-programmer. A programming house is converting my access
database to DB2 to be run on an AS400. The programmers tell me that
DB2 has no way to prevent the user's DB admin from gaining access to
the SQL statements in code. (I find this hard to believe in that I am
able to use MS Access security to hide my code by creating MDE files
and using its built-in user-based security.)
OK I have never worked is MS Access. If I am a DBA for MS Access and an
application suddenly starts performing poorly. How do I fix it without
being able to see the SQL Statements?

Cheers
Serge
--
Serge Rielau
DB2 Solutions Development
IBM Toronto Lab
Apr 21 '07 #2
Serge Rielau wrote:
DG******@AOL.COM wrote:
>I am a non-programmer. A programming house is converting my access
database to DB2 to be run on an AS400. The programmers tell me that
DB2 has no way to prevent the user's DB admin from gaining access to
the SQL statements in code. (I find this hard to believe in that I am
able to use MS Access security to hide my code by creating MDE files
and using its built-in user-based security.)
OK I have never worked is MS Access. If I am a DBA for MS Access and an
application suddenly starts performing poorly. How do I fix it without
being able to see the SQL Statements?
Besides, you can make things a bit harder in DB2 by using dynamic SQL.

--
Knut Stolze
DB2 z/OS Utilities Development
IBM Germany
Apr 22 '07 #3
On Apr 21, 3:29 pm, DGALT...@AOL.COM wrote:
I am a non-programmer. A programming house is converting my access
database to DB2 to be run on an AS400. The programmers tell me that
DB2 has no way to prevent the user's DB admin from gaining access to
the SQL statements in code. (I find this hard to believe in that I am
able to use MS Access security to hide my code by creating MDE files
and using its built-in user-based security.)

My question: Is this true? If so, how does one protect their code if
written in DB2?

Thanks - Doug
First, you are using DB2 for iSeries (AS/400) which not many on this
newsgroup know anything about, and which is different in many respects
from the other DB2's.

Second, you did not specify what kind of code you are talking about,
such as application programming language, stored procedure, SQL
statements, etc.

It is generally true that DBA's can see SQL statements that are run
against the database, and they can see SQL stored procedures and
UDF's. But they cannot see the non-SQL code in an application program.
This is true in any serious database, such as DB2, Oracle, or SQL
Server. But again, I know very little about AS/400 and what kinds of
programs you are referring to.

Apr 22 '07 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
by: Novice | last post by:
Hi all, I'm afraid this is the second posting of this information as I didn't get a response on the previous post. I will try to shorten my message (i.e. be more concise) in the hopes that it will...
1
by: Namratha Shah \(Nasha\) | last post by:
Hey Guys, Before we start with our sample app we need to view the security configuration files on the machine. You will find them under <drive>\WInNT\Microsoft.NET\FrameWork\<version>\Config ...
2
by: Antony | last post by:
I am currently writing an application (VB.NET) and I was thinking about all the hype that seems to be given to security and if I should pay it any attention or not. My first thought was, nah, no...
40
by: Neo The One | last post by:
I think C# is forcing us to write more code by enforcing a rule that can be summarized as 'A local variable must be assgined *explicitly* before reading its value.' If you are interested in what...
0
by: Namratha Shah \(Nasha\) | last post by:
Hey Guys, Today we are going to look at Code Access Security. Code access security is a feature of .NET that manages code depending on its trust level. If the CLS trusts the code enough to...
2
by: Maellic | last post by:
Hi, I'm currently updating a website written with ASP.NET. The original programmer is overseas, there is no documentation, and files are all over the place. Here is a code snippet from one of...
6
by: google | last post by:
I have a few general questions. I am working on a new database to be used within my company. I would like to give a couple of people, particularly HR, the ability to add and delete Access users,...
1
by: Jeremy S. | last post by:
..NET's code Access Security enables administrators to restrict the types of things that a .NET application can do on a local computer. For example, a ..NET Windows Forms application can be...
10
by: Daniel | last post by:
Hi Guys I remember some strong naming things and keys that i read but cannot recall how to use it. However i am now using CLick Once deployment. Is my code safe when i deploy this way or do i...
4
by: =?Utf-8?B?QXZhRGV2?= | last post by:
ASP.Net 2. We are migrating to Windows 2008 64 bit Server with IIS 7 from Windows 2003 32 Bit with IIS 6. A few library classes we wrote uses impersonation in code like explained in this...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: aa123db | last post by:
Variable and constants Use var or let for variables and const fror constants. Var foo ='bar'; Let foo ='bar';const baz ='bar'; Functions function $name$ ($parameters$) { } ...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...
0
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.