Subject | Re: How to prevent SYSDBA to connect to database |
---|---|
Author | Alexander V.Nevsky |
Post date | 2004-02-18T11:31:54Z |
--- In firebird-support@yahoogroups.com, "Artur Anjos" <artur@a...>
wrote:
Katon Elder. This trick with SYSDBA role can be hacked in 5 minutes by
any person who have imagination about system tables structure even
without embedded engine. While users are stored outside database and
any user can select from system tables, we can definitely forget about
security.
Best regards,
Alexander.
wrote:
> If someone gets direct access to your database file, forget aboutsecurity.
> If you use embedded, you must give direct access to the file to theuser
> that runs the application.Ceterum censeo Carthagihem aka security.fdb delendam esse (C) Mark
Katon Elder. This trick with SYSDBA role can be hacked in 5 minutes by
any person who have imagination about system tables structure even
without embedded engine. While users are stored outside database and
any user can select from system tables, we can definitely forget about
security.
Best regards,
Alexander.