Subject Re: [Firebird-Architect] Database triggers
Author Adriano dos Santos Fernandes
Jim Starkey wrote:
> Adriano dos Santos Fernandes wrote:
>
>> Leyne, Sean wrote:
>>
>>
>>>> Only SYSDBA/owner is allowed to backup a db.
>>>>
>>>>
>>>>
>>> True, but remember that there was been discussion of defining a
>>> "security context" (for lack of a better word) which would allow for
>>> rights to be granted to any user to perform backups.
>>>
>>>
>>>
>> So just verify (when the new DPB is passed) if user is SYSDBA/owner when
>> the attachment don't come from these utilities.
>> And anyone will backup without run the triggers.
>>
>>
>>
>>
>
> That's not a very good solution. The existing security model is based
> on accounts and privileges. Building in a short cut based on
> application type breaks the model. There is nothing about a logical
> backup that requires breaking the security model. And if there were, a
> full replacement security model should be proposed and discussed.
>
You're right.

Don't work well if GBAK stop to send a special dpb.


Adriano