Subject Re: [Firebird-Architect] Database triggers
Author Jim Starkey
Adriano dos Santos Fernandes wrote:
> Leyne, Sean wrote:
>>> Only SYSDBA/owner is allowed to backup a db.
>> True, but remember that there was been discussion of defining a
>> "security context" (for lack of a better word) which would allow for
>> rights to be granted to any user to perform backups.
> So just verify (when the new DPB is passed) if user is SYSDBA/owner when
> the attachment don't come from these utilities.
> And anyone will backup without run the triggers.

That's not a very good solution. The existing security model is based
on accounts and privileges. Building in a short cut based on
application type breaks the model. There is nothing about a logical
backup that requires breaking the security model. And if there were, a
full replacement security model should be proposed and discussed.


Jim Starkey, Senior Software Architect
978 526-1376