Subject | Re: [firebird-support] Embedded Firebird Security - Basic Questions |
---|---|
Author | Paul Vinkenoog |
Post date | 2006-05-19T21:28:02Z |
Hi Pri,
databases. There's no such thing as a "Firebird Embedded" database as
opposed to other Firebird databases.
The difference with Embedded is that the server security check is
bypassed. Anyone can connect as any user, with any password, but they
MUST have filesystem access to the database file.
With regular Firebird servers, the users don't need (and indeed should
not have) filesystem access to the database file.
data in case someone gets hold of the database, encrypt sensitive data
before you feed them to the database.
Greetings,
Paul Vinkenoog
> 1. I am new to firebird, and want to use firebird embedded. So, myYes, look in the Release Notes for the exact details.
> application is easier to deploy. What i need is just few firebird
> dll (fbembed, etc).
>
> -> Am i correct?
> 2. How about the security in embedded firebird? Anyone can copy theYes, but please understand that this is the case with ALL Firebird
> file (if they have filesystem access) and open it using various
> tools.
databases. There's no such thing as a "Firebird Embedded" database as
opposed to other Firebird databases.
The difference with Embedded is that the server security check is
bypassed. Anyone can connect as any user, with any password, but they
MUST have filesystem access to the database file.
With regular Firebird servers, the users don't need (and indeed should
not have) filesystem access to the database file.
> Any idea to protect data in the database itself? No matter peopleFirebird has no data ecryption features. If you want to protect your
> can copy the database, if they cannot open it.
data in case someone gets hold of the database, encrypt sensitive data
before you feed them to the database.
Greetings,
Paul Vinkenoog