Subject | Re: change user to DB |
---|---|
Author | ciccios78 |
Post date | 2010-04-27T13:22:09Z |
--- In firebird-support@yahoogroups.com, "Dunbar, Norman" <norman.dunbar@...> wrote:
thanks very much. :)
>thanks norman, my suspect are right i think, there is no way to do what i want. so the only way is prevent access to server and db.
> Afternoon,
>
> >> yes but on another server the SYSDBA have access to my db
> >> and i don't want that.
>
> You cannot, at present, prevent the SYSDBA user getting access to
> everything in any database on that server.
>
> This means that if you have two servers and a database on server_a is
> copied to server_b, then anyone with SYSDBA rights can look at all the
> data and code inside the database. Unlike Oracle, the SYSDBA password is
> set for the entire server, not for each individual database on that
> server.
>
> So, to prevent people seeing your data (on server_b when the database is
> copied from server_a) you must prevent people copying the database to
> server_b.
>
> There are details in the "gbak" manual on preventing this sort of "data
> theft" - http://www.firebirdsql.org/manual/gbak-security.html.
>
> What is even worse is the fact that if I get hold of a copy (or a
> backup) of your database, I can put it on my server and read all your
> data simply by logging in as SYSDBA with *my* sysdba password.
>
> :-(
>
>
> Cheers,
> Norman.
>
>
>
thanks very much. :)