Hi,

>Does your app support user management or do you assume that SYSADM
>creates users independently?
>If user wants to change his password - how can he do it?

There's a seperate application that SYSADM can use to add/delete/modify
users on the server. For IB, this uses the IBX security component.

I don't think we have something to change passwords yet - gotta tell it to
the creator of the application :)

Martijn Tonies
InterBase Workbench - the developer tool for InterBase and Firebird
http://www.interbaseworkbench.com

> > I'm planning to secure my app a little and thought about
> starting with
> > user management.
> > Currently my app connects with predefined username and
> > password that is
> > in crypted form stored into app. The users names and
> passwords are in
> > USERS table. Now I thought to change it - SYSADM will create new
> > Interbase users, who will connect to database by entering
> > their name and
> > password (my app gives them specified ROLE). Are there any
> pitfalls in
> > this approach?
>
> We use the same approach - IB names and an application role
> assigned to the
> users.
>
> What we are planning to change now, is to automatically add a
> pre- and/or
> postfix to the username and/or password so when they would
> download a copy
> of IBConsole, they still don't have a valid username/password
> combo to enter
> the database and destroy it :)
>
> Martijn Tonies
> InterBase Workbench - the developer tool for InterBase and Firebird
> http://www.interbaseworkbench.com
>
>
> [Non-text portions of this message have been removed]
>
>
> ------------------------ Yahoo! Groups Sponsor
> ---------------------~-->
> Sponsored by VeriSign - The Value of Trust
> Secure all your Web servers now - with a proven 5-part
> strategy. The FREE Server Security Guide shows you how.
> http://us.click.yahoo.com/iWSNbC/VdiDAA/yigFAA/dpFolB/TM
> --------------------------------------------------------------
> -------~->
>
> To unsubscribe from this group, send an email to:
> ib-support-unsubscribe@egroups.com
>
>
>
> Your use of Yahoo! Groups is subject to

http://docs.yahoo.com/info/terms/



Yahoo! Groups Sponsor
ADVERTISEMENT




To unsubscribe from this group, send an email to:
ib-support-unsubscribe@egroups.com



Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.


[Non-text portions of this message have been removed]