Home
Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
Security in HCL Informix®
The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
Auditing data security
Overview of auditing with the Informix® secure auditing facility
Audit masks and audit instructions
Audit instructions
Level of auditing granularity

Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
- Security in HCL Informix®
  The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
  - Securing data
  - Auditing data security
    - Overview of auditing with the Informix® secure auditing facility
    - Audit administration
    - Audit analysis
    - The onaudit utility
      Use the onaudit utility to manage audit masks and auditing configuration.
    - The onshowaudit utility
      Use the onshowaudit utility to view the audit information from an existing audit trail. You can use this command to extract information for a particular user, database server, or both, making it possible to isolate a particular subset of data from a potentially large audit trail.
    - Audit event codes and fields
      The secure-auditing facility audits certain database server events.
    - The ADTCFG file

Level of auditing granularity

The secure-auditing facility can audit the following events at the fragment level of granularity and shows additional information for fragmented objects:

Alter Table (ALTB). The partition list that follows the alter-table operation is in the event record.
Create Index (CRIX). The index can be fragmented; the event record includes fragmentation information.
Create Table (CRTB). The table can be fragmented; the event record includes fragmentation information.
Delete Row (DLRW). The partition and the record ID within the partition are in the event record.
Insert Row (INRW). The partition and the record ID within the partition are in the event record.
Read Row (RDRW). The partition and the record ID within the partition are in the event record.
Update Row (UPRW). The partition and the record ID within the partition are in the event record.

Attention: Use row-level auditing only when absolutely necessary. Row-level auditing slows the database server dramatically and fills audit directories quickly.

For more information about the fields in an audit-event record, see Audit event codes and fields.

In addition, the database server audits the following events to the RESTRICT/CASCADE level:

Drop Table (DRTB)
Drop View (DRVW)
Revoke Table Access (RVTB)

For more information about the corresponding SQL statements, see the Informix® Guide to SQL: Syntax.