Database Roles

smcquay

We're hosted by Infor and need to lock down our database users.  Anyone have suggestions or roles they've created, hosted or otherwise?  We're read only anyway, but not everyone needs access to query the Employee table, for example.

Thanks,

Sandy McQuay

St. Bernards Healthcare

 

unknown

We are still on Lawson S3 10x. It's the "old" technology, which uses the ladb process to access the back-end Lawson database. Nobody gets access directly to the database. The ladb user is a Lawson-only user, nobody but administrators have access to the password. Reports can come through Crystal Reports (LBI uses Crystal Reports, we use a native Business Objects report manager instead). These use a read-only database account - which also is not shared with regular users. Administration of the database is done with a 3rd, administrator-only account with full database rights. The "lawson" user, the account that is used to set up Lawson, has no rights on the database. As far as my experience goes, this is 'best practice' and the most locked-down it can be. 3 database users, none accessible to anyone who isn't a systems administrator.