We have been able to successfully connect to our AS/400 via ODBC and Cold
Fusion, however we have found out that we are able to modify practically any
table/file on the AS/400, even though the user profile used does not have
specific authority to the file.

It seems that the ODBC connection will use public authority no matter what
profile we provide, or how restricted the profile is.

Has anyone else noticed this, or have any resources I could read up on, on
this specific topic. The IBM AS/400 help on ODBC does not seem to be very
detailed in this area, just that it basically works.

Thanks,