| Subject | [firebird-support] Can I restrict sysdba to login from localhost? |
|---|---|
| Author | Rustam |
| Post date | 2019-03-13T15:39:35Z |
Another possible solution - create background application that sits on server, connected to DB and periodically check MON$ATTACHMENTS table.
If SYSDBA from remote computer there - kill connection.
> I suppose, you can create ON CONNECT trigger and verify 'current_user' and client remote > IP address against '127.0.0.1' (from MON$ATTACHMENTS table). No, SYSDBA is able to bypass them. -- WBR, SD.