DB2 CODE SECURITY??

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

DGALT922@AOL.COM - 21 Apr 2007 20:29 GMT

I am a non-programmer. A programming house is converting my access
database to DB2 to be run on an AS400. The programmers tell me that
DB2 has no way to prevent the user's DB admin from gaining access to
the SQL statements in code. (I find this hard to believe in that I am
able to use MS Access security to hide my code by creating MDE files
and using its built-in user-based security.)

My question: Is this true? If so, how does one protect their code if
written in DB2?

Thanks - Doug

Reply to this Message

Serge Rielau - 22 Apr 2007 00:29 GMT

> I am a non-programmer. A programming house is converting my access
> database to DB2 to be run on an AS400. The programmers tell me that
> DB2 has no way to prevent the user's DB admin from gaining access to
> the SQL statements in code. (I find this hard to believe in that I am
> able to use MS Access security to hide my code by creating MDE files
> and using its built-in user-based security.)

OK I have never worked is MS Access. If I am a DBA for MS Access and an
application suddenly starts performing poorly. How do I fix it without
being able to see the SQL Statements?

Cheers
Serge

Signature

Serge Rielau
DB2 Solutions Development
IBM Toronto Lab

Reply to this Message

Knut Stolze - 22 Apr 2007 00:59 GMT

>> I am a non-programmer. A programming house is converting my access
>> database to DB2 to be run on an AS400. The programmers tell me that
[quoted text clipped - 5 lines]
> application suddenly starts performing poorly. How do I fix it without
> being able to see the SQL Statements?

Besides, you can make things a bit harder in DB2 by using dynamic SQL.

Signature

Knut Stolze
DB2 z/OS Utilities Development
IBM Germany

Reply to this Message

Mark A - 22 Apr 2007 16:38 GMT

On Apr 21, 3:29 pm, DGALT...@AOL.COM wrote:

> I am a non-programmer. A programming house is converting my access
> database to DB2 to be run on an AS400. The programmers tell me that
[quoted text clipped - 7 lines]
>
> Thanks - Doug

First, you are using DB2 for iSeries (AS/400) which not many on this
newsgroup know anything about, and which is different in many respects
from the other DB2's.

Second, you did not specify what kind of code you are talking about,
such as application programming language, stored procedure, SQL
statements, etc.

It is generally true that DBA's can see SQL statements that are run
against the database, and they can see SQL stored procedures and
UDF's. But they cannot see the non-SQL code in an application program.
This is true in any serious database, such as DB2, Oracle, or SQL
Server. But again, I know very little about AS/400 and what kinds of
programs you are referring to.

Reply to this Message