Specifying secured features

To control the database features available to users, you can include the secured features option (-sf) when starting the database server. The secured features option controls the availability of such features as:

For a complete list of features, see -sf dbeng12/dbsrv12 server option.

You also have the option of including the -sk option when you start the database server. This option specifies a key that can be used to re-enable secured features for a specific connection. You re-enable secured features for a connection by setting the value of the secure_feature_key temporary option to the value specified by -sk when the database server was started.

To modify the features or feature sets that are secured for the connection, specify a key with -sk and set the secure_feature_key temporary option to the key value to use the sa_server_option system procedure. Any changes you make to enable or disable features take effect immediately.

 To secure database features
  1. Start the database server using the -sf, and optionally -sk, options.

    For example, the following command starts the database server and disables the use of remote data access. However, it includes a key that can be used to re-enable the disabled features for a connection.

    dbsrv12 -n secure_server -sf remote_data_access -sk ls64uwq15 c:\mydata.db
  2. Connect to the database server.

    For example:

    dbisql -c "UID=DBA;PWD=sql;Host=myhost;Server=secure_server;DBN=demo"
  3. Set the value of the temporary secure_feature_key option to the value specified by -sk when the database server was started.

    For example:

    SET TEMPORARY OPTION secure_feature_key = 'ls64uwq15';
  4. Change the secured features for the database server with the sa_server_option system procedure.

    For example:

    CALL sa_server_option( 'SecureFeatures', '-remote_data_access' );
 See also