Subject | Re: [firebird-support] Firebird sysdba account |
---|---|
Author | Svein Erling Tysvaer |
Post date | 2008-08-12T21:09:21Z |
Trying to prevent people access through changing the SYSDBA password
will not work. Anyone with access to the database file could copy it to
another computer with Firebird where they know the SYSDBA password (or
reinstall Firebird at the same computer without deleting the database
file). Moreover, if the users have other databases using Firebird, they
might want to have SYSDBA access to those databases and many would
become angry if they suddenly discovered that the SYSDBA password had
been changed... they might have to reinstall Firebird and recreate all
users for their other programs to work as intended.
The one thing that you seem to be ignoring, is that users are specified
on the database (Firebird) SERVER, not in the DATABASE itself (in the
database you just grant access to all users except the creator and
SYSDBA, which both have unlimited access). If you want to allow people
access to the database file without knowing too much about the database
content, I think encrypting your data is the way to go (although I've
never needed that myself and there may exist other solutions).
Sorry,
Set
Stevio wrote:
will not work. Anyone with access to the database file could copy it to
another computer with Firebird where they know the SYSDBA password (or
reinstall Firebird at the same computer without deleting the database
file). Moreover, if the users have other databases using Firebird, they
might want to have SYSDBA access to those databases and many would
become angry if they suddenly discovered that the SYSDBA password had
been changed... they might have to reinstall Firebird and recreate all
users for their other programs to work as intended.
The one thing that you seem to be ignoring, is that users are specified
on the database (Firebird) SERVER, not in the DATABASE itself (in the
database you just grant access to all users except the creator and
SYSDBA, which both have unlimited access). If you want to allow people
access to the database file without knowing too much about the database
content, I think encrypting your data is the way to go (although I've
never needed that myself and there may exist other solutions).
Sorry,
Set
Stevio wrote:
> Is there any way to change the sysdba password when releasing an application
> to someone?
>
> I have a Delphi application that uses a Firebird database (was using 1.5 but
> will now use 2.1).
>
> Is there any way to change the password so people cannot directly access the
> database? At the moment I have the password hardcoded into the Delphi
> application.
>
> I would prefer to protect the database which a unique password that I could
> hardcode into my application (or at least put the password in the registry
> or somewhere) but is this possible?
>
> Thanks,
> Stephen