Re: [Firebird-devel] FB/Java plugin security

2016-03-07 Thread alex
06.03.2016 19:06, Adriano dos Santos Fernandes пишет: > Hi! > > Original FB/Java plugin had a security database where SYSDBA could > define JAAS permissions per users. > > Since Java can read files and do bad things, it's SYSDBA (server admin) > to define these permissions. And since was SYSDBA

Re: [Firebird-devel] FB/Java plugin security

2016-03-07 Thread Dimitry Sibiryakov
06.03.2016 17:06, Adriano dos Santos Fernandes wrote: > Should the FB/Java security database not mention only user names but > databases too, and how? IMHO, Java security settings must be organized at server level. May be in plugin config file. Then, after implementation of CORE-4482, they

[Firebird-devel] FB/Java plugin security

2016-03-06 Thread Adriano dos Santos Fernandes
Hi! Original FB/Java plugin had a security database where SYSDBA could define JAAS permissions per users. Since Java can read files and do bad things, it's SYSDBA (server admin) to define these permissions. And since was SYSDBA task to create users, that was ok. No we can have embedded users in