To control the database features available to users, you can include the secured features option (-sf) when starting the database server. The secured features option controls the availability of such features as:

• server-side backups
• external stored procedures
• remote data access
• web services

For a complete list of features, see -sf server option.

You also have the option of including the -sk option when you start the database server. This option specifies a key that can be used to re-enable secured features for a specific connection. You re-enable secured features for a connection by setting the value of the secure_feature_key temporary option to the value specified by -sk when the database server was started.

To modify the features or feature sets that are secured for the connection, specify a key with -sk and set the secure_feature_key temporary option to the key value to use the sa_server_option system procedure. Any changes you make to enable or disable features take effect immediately.

To secure database features

1. Start the database server using the -sf, and optionally -sk, options.

   For example, the following command starts the database server and disables the use of remote data access. However, it includes a key that can be used to re-enable the disabled features for a connection.

   dbsrv11 -n secure_server -sf remote_data_access -sk ls64uwq15 c:\mydata.db

2. Connect to the database server.

   For example:

   dbisql -c "UID=DBA;PWD=sql;ENG=secure_server;DBN=demo"

3. Set the value of the temporary secure_feature_key option to the value specified by -sk when the database server was started.

   For example:

   SET TEMPORARY OPTION secure_feature_key = 'ls64uwq15';

4. Change the secured features for the database server with the sa_server_option system procedure.

   For example:

   CALL sa_server_option( 'SecureFeatures', '-remote_data_access' );

See also

• -sf server option
• -sk server option
• secure_feature_key [database]
• sa_server_option system procedure