Subject | Sysdba user and what they can do |
---|---|
Author | Stevio |
Post date | 2009-04-07T16:10Z |
A while back we had a discussion on here regarding the sysdba user and
creating a user for your application etc. I'm just looking for a bit of
guidance now and to check I am going about things the right way.
I have been updating the database used by my application to be owned by a
specific user (e.g. "myfirebirduser"), not the sysdba user. However, if
someone logs into my application as "sysdba" instead of "myfirebirduser",
they can still use the application just as well as "myfirebirduser" and make
changes to the database through the application.
Is the best thing to do to write code into my application to prevent someone
logging in as the sysdba user? (I know they could still use a database
program to access the data but I want to force them, when using the app, to
login as "myfirebirduser".)
Also, I have an existing database that I would like to change the owner and
all the rights etc from "sysdba" to "myfirebirduser". I tried to do this
before but didn't succeed. Can you recommend an application that I could use
to do this and any advice about how to do it is appreciated.
Thanks.
creating a user for your application etc. I'm just looking for a bit of
guidance now and to check I am going about things the right way.
I have been updating the database used by my application to be owned by a
specific user (e.g. "myfirebirduser"), not the sysdba user. However, if
someone logs into my application as "sysdba" instead of "myfirebirduser",
they can still use the application just as well as "myfirebirduser" and make
changes to the database through the application.
Is the best thing to do to write code into my application to prevent someone
logging in as the sysdba user? (I know they could still use a database
program to access the data but I want to force them, when using the app, to
login as "myfirebirduser".)
Also, I have an existing database that I would like to change the owner and
all the rights etc from "sysdba" to "myfirebirduser". I tried to do this
before but didn't succeed. Can you recommend an application that I could use
to do this and any advice about how to do it is appreciated.
Thanks.