https://bugs.freedesktop.org/show_bug.cgi?id=88232

--- Comment #9 from cpohle <cpo...@gmail.com> ---
(In reply to Alex Thurgood from comment #3)
> As you can see from the attached screenshot, the only string I see is the db
> name followed by any optional connection parameters. You should not be
> putting id and password combos directly in here, but rather use the separate
> dialog provided for that purpose.

You're right. But to the best of my knowledge, providing authentication data as
part of the connection string is the only way to prevent the user from having
to enter the password everytime he want's to access the database, e.g. for
grabbing an address for a mail-merge in Writer.

I understand that this approach is terrible from a security perspective, but
it's viable as a compromise in certain usage scenarios (e.g. when access to the
odb file can be restricted by other means).

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to