Specifying secured features

To control the database features available to users, you can include the secured features option (-sf) when starting the database server. The secured features option controls the availability of such features as:

For a complete list of features, see -sf server option.

You also have the option of including the -sk option when you start the database server. This option specifies a key that can be used to re-enable secured features for a specific connection. You re-enable secured features for a connection by setting the value of the secure_feature_key temporary option to the value specified by -sk when the database server was started.

To modify the features or feature sets that are secured for the connection, specify a key with -sk and set the secure_feature_key temporary option to the key value to use the sa_server_option system procedure. Any changes you make to enable or disable features take effect immediately.

To secure database features

  1. Start the database server using the -sf, and optionally -sk, options.

    For example, the following command starts the database server and disables the use of remote data access. However, it includes a key that can be used to re-enable the disabled features for a connection. 

    dbsrv11 -n secure_server -sf remote_data_access -sk ls64uwq15 c:\mydata.db

  2. Connect to the database server.

    For example:

    dbisql -c "UID=DBA;PWD=sql;ENG=secure_server;DBN=demo"

  3. Set the value of the temporary secure_feature_key option to the value specified by -sk when the database server was started.

    For example:

    SET TEMPORARY OPTION secure_feature_key = 'ls64uwq15';

  4. Change the secured features for the database server with the sa_server_option system procedure.

    For example:

    CALL sa_server_option( 'SecureFeatures', '-remote_data_access' );
See also
Copyright © 2008, iAnywhere Solutions, Inc. - SQL Anywhere 11.0.0