Subject Re: Database Security, or lack thereof
Author lance8086
--- In firebird-support@yahoogroups.com, "Adam" <s3057043@y...> wrote:
> A quick visit to the FAQ, knowledge base or a search of this forum
> would alert you to these restrictions. You are not uncovering
anything
> unknown.

Thanks. I figured as much.

> Here are some more:
Read all that already. Most of it deals with physical security
issues which exists on any platform.

I was just suprised at the lack of logical security in the database.
I wasn't even trying and was able to wreck it. A non-dba user should
not be able to destroy a db though a query.

> It is quite possible to create a secure environment using Firebird,
> but you must go in using the Firebird mindset.

If so, I'd like to see an example that's not going to take a lot of
time to set up and maintain.

> By the way, I do agree with you that FB security does lack features
> available to other databases.

It also lacks other features I would consider standard for a
production dbms, like builtin transaction logging and recovery.

>I suggest you read the plans for Firebird 2 and 3 to see.

Small consolation for today.

Firebird seems to be on the right track, but its not even close to
there yet. Hopefully I'll be able to work around its current
shortcomings.