Subject | Re: [Firebird-Architect] External engines - metadata |
---|---|
Author | Alex Peshkov |
Post date | 2007-10-19T07:52:23Z |
On Thursday 18 October 2007 19:50, Adriano dos Santos Fernandes wrote:
file and load it normally. Unability to load Delphi routine directly from
database should not be showstopper to store external routines/classes/etc. in
a database.
Certainly, we must have well defined user's rights related with defining
external routines. Without it we can easily return to problems, when any user
with valid FB login may execute any code in context of firebird server. For
example, if any user would be able to create database (becoming it's owner)
like now, being DBO should not be enough to define external routines in that
database. With Java we may be can use J2SE to limit what class does, but with
Delphi - hackers will say 'Thanks, guys' :).
> >> I'm using Java in Oracle, they store everything (AFAIU) in the database.In the worst case it's possible for plugin to copy component from database to
> >
> > It is possible to load Java classes from the database (or whatever
> > stream you provide - network, archive, random number generators provided
> > they generate correct Java classes) , but first we have to define
> > whether we are going to support similar feature for .NET (loading
> > assemblies, should work, AFAIK) and Delphi (hmmm... is there any chance
> > for it?)...
>
> I think we should not use less denominator factor.
>
> Each plugin may define best way able for his language.
file and load it normally. Unability to load Delphi routine directly from
database should not be showstopper to store external routines/classes/etc. in
a database.
Certainly, we must have well defined user's rights related with defining
external routines. Without it we can easily return to problems, when any user
with valid FB login may execute any code in context of firebird server. For
example, if any user would be able to create database (becoming it's owner)
like now, being DBO should not be enough to define external routines in that
database. With Java we may be can use J2SE to limit what class does, but with
Delphi - hackers will say 'Thanks, guys' :).