Subject Re: [firebird-support] Safe method for users to change its own password
Author Michael Ludwig
Ramiro Barreca schrieb am 26.04.2010 um 10:09:06 (-0300):

> Is there any SAFE method to allow users to change their own password
> from an app (i.e. a Delphi one)?
> We need to encrypt in some way users passwords, but this means allow
> the app to use "gsec" with the SYSDBA user/pass from within the app.
> Isn't it? Is there another way that would allow the own user change
> its own password with its own credentials from the app?

Depending on the kind of application you have, you could have just one
Firebird account for your application and have a server grant or deny
access to the database upon successful or unsuccessful authorization
against a user database of your own implementation (stored in Firebird),
which is the standard thing to do with web applications. But if your
application is just two-tier Delphi to Firebird, then this isn't an
option.

--
Michael Ludwig