Subject | Re: [ib-support] Suggestion for Interbase/Firebird security |
---|---|
Author | Nando Dessena |
Post date | 2003-01-10T08:35:59Z |
Rusmin,
anyone can login with a root password.
While in general I agree that some sort of database-wide (as opposed to
server-wide) user definition is desirable in many cases (f. ex. for web
applications deployed by differente parties and hosted in a way that
they that must share the Firebird server), I don't think it adds much in
terms of security. Trying to protect a database from SYSDBA looks
pointless to me.
My 2c.
--
____
_/\/ando
> Since Interbase/Firebird have no securitythis is almost the same as stating that Linux has no security since
> on opening the database.
> I mean everybody can open it with a SYSDBA password.
anyone can login with a root password.
While in general I agree that some sort of database-wide (as opposed to
server-wide) user definition is desirable in many cases (f. ex. for web
applications deployed by differente parties and hosted in a way that
they that must share the Firebird server), I don't think it adds much in
terms of security. Trying to protect a database from SYSDBA looks
pointless to me.
My 2c.
--
____
_/\/ando