Restricting Access to Log Files 

Use

Users can access log files using operating system commands and functions as well as with the database tool Database Manager.

Procedure

Restricting Access with Operating System Commands and Functions

On UNIX/Linux, unprivileged operating system users cannot access log files; only members of the special user group <sdba_group> can do so.

On Microsoft Windows, all operating system users can access log files. To restrict access in Microsoft Windows, proceed as described in Restricting Access to Database Resources (Microsoft Windows).

Restricting Access with the Database Manager

Withdraw the server authorization for reading database files from all Database Manager operators that should not have access to log files.

·        Database Manager GUI: Withdraw the server authorization Database File Access. Proceed as described in Changing the Server Authorizations.

·        Database Manager CLI: Withdraw the server authorization DBFileRead. Proceed as described in Changing the DBM Operator Data.

See also:

·        Defining Clear Authorizations for Users

·        Concepts of the Database System, Server Authorizations for the DBM Server