Hello,

Is there a reason the default permissions on a newly created database is read "R" for /all/ virtual servers?
This has 2 disadvantages
1) If the site-admin neglects to review permissions a potontial malicious user can get data out of a database
through rxml code.
2) A site-admin has to manually click "N" for /every/ virtual server to change permissions.

I'd say a good default is to have permissions set to N, so the site-admin is both triggered to review this setting because the database cannot be reached, and then can set it for the appropriate virtual server.

Regards,

Marc

Reply via email to