[#CORE-1845] Some standard calls show server installation directory to regular users

Firebird Core

Some standard calls show server installation directory to regular users

Created: 17/Apr/08 09:40 AM Updated: 04/Aug/08 03:08 AM

Component/s:

None

Affects Version/s:

2.1 RC2, 2.5 Initial, 2.1 RC1, 1.5.5, 2.1 Beta 2, 2.0.3, 2.0.2, 2.1 Beta 1, 2.1 Alpha 1, 2.0.1, 1.5.4, 2.0.0, 1.0.3, 2.0.4, 2.1.0

Fix Version/s:

2.1.1, 2.5 Alpha 1

Original Estimate:	Unknown	Remaining Estimate:	Unknown	Time Spent:	Unknown
Environment:	Any

Resolution Date:	08/May/08
Target:	2.1.1 and 2.5 Alpha 1
Planning Status:	Unspecified

Description

« Hide

In order to avoid extra security risks, given in restricted comment.

All

Comments

Work Log

Change History

Version Control

Subversion Commits

Sort Order:

[ Permlink | « Hide ]

Volker Rehn - [28/Jul/08 12:43 PM ]

Some apps require a list of aliases. With customer-side installations, the sysdba pw is often unknown to deployers. A workaround could be to allow the DBO access to server info like isc_info_svc_get_env, because 2.5 with its rdb$admin isn't available yet for production.

[ Permlink | « Hide ]

Alexander Peshkov - [04/Aug/08 03:08 AM ]

Sorry, it's impossible. Service manager works in server, not database context, therefore DBO is meaningless for it.