Fidel Viegas wrote:

> On Wed, Aug 13, 2008 at 6:00 PM, Niben M Singh <niben_s@...> wrote:
>
>> Does this mean if we are to deploy Firebird database file as a part of
>> application then there is no way to restrict access to the delivered
>> database, as anyone can copy the file to different server and use SYSDBA
>> user to login to the database.
>>
>> How do we then secure database in embedded applications from Firebird
>> standpoint?
>>
>
> Do what Set has suggested: encrypt the data.
>
> Fidel.
>

The problem with encryption is that you have to store the key on some
place (inside the aplication ?) not a so secure approach either.

Another point is.. you will have problems to do inequality search with
encrypted data.

There is no easy way to protect the data when one has physical access to
the database file.

see you !


--
Alexandre Benson Smith
Development
THOR Software e Comercial Ltda
Santo Andre - Sao Paulo - Brazil
www.thorsoftware.com.br