Issue Details (XML | Word | Printable)

Key: CORE-2369
Type: Improvement Improvement
Status: Open Open
Priority: Major Major
Assignee: Unassigned
Reporter: Marco Wolff
Votes: 0
Watchers: 0
Operations

If you were logged in you would be able to see more operations.
Firebird Core

Database should revoke SYDBA grants

Created: 12/Mar/09 11:37 AM   Updated: 17/Feb/12 04:25 AM
Component/s: None
Affects Version/s: 2.1.1
Fix Version/s: None


 Description  « Hide
Hi,

after installing Firebird Server, the default User Sysdba with the default password is installed. For security reasons i changed the password of the SYSDBA for declining the access to my fdb's. So on this PC no one can connect to my fdb.

But now, if i install Firebird Server on one another PC, everyone can log in with the default user SYSDBA and his default password and can connect to my fdb copied from the first PC.

How can i revoke grants from the SYSDBA? It should not possible that worldwide every SYSDBA can attach to my fdb. Even i added roles and only one role has permissions to do a select on my fdb, the SYSDBA can always do everything.
For security reasons that's critical or not?

Thanks for your answer.
Marco

 All   Comments   Change History   Subversion Commits      Sort Order: Ascending order - Click to sort in descending order
There are no comments yet on this issue.