Subject | Re: [firebird-support] Re: Users can create anything?!? |
---|---|
Author | Sam Hunt |
Post date | 2005-05-25T00:07:59Z |
richardghayward wrote:
I'll let someone else add to what I have said.
Sam H.
>Hi Sam,maybe I didn't state the case correctly for FB.
>
>
>
>>"Users" are NOT normally allowed to log into the FB server.
>>Why are yours?
>>Your app should be providing appropriate privleges/access rights to
>>necessary data.
>>
>>
>>
>
>Because security should be the responsibility of the server, not a
>client application. I want to give users the freedom to use any FB
>client they want, IBOconsole, IB_SQL , ibWebAdmin or whatever.
>
>
>
>>If your users need to query the data, provide them with a tool with a
>>dedicated read-only datasource.
>>
>>
>
>Well following that line of reasoning, why bother having a server that
>understands how to grant or withhold select permissions at all?
>
>regards
>Richard
>
>
>
>
>
>++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
>
>Visit http://firebird.sourceforge.net and click the Resources item
>on the main (top) menu. Try Knowledgebase and FAQ links !
>
>Also search the knowledgebases at http://www.ibphoenix.com
>
>++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
>
>Yahoo! Groups Links
>
>
>
>
>
>
>
>
I'll let someone else add to what I have said.
Sam H.