Issue Details (XML | Word | Printable)

Key: CORE-2657
Type: Bug Bug
Status: Closed Closed
Resolution: Fixed
Priority: Major Major
Assignee: Alexander Peshkov
Reporter: Alexander Peshkov
Votes: 0
Watchers: 0
Operations

If you were logged in you would be able to see more operations.
Firebird Core

Ability to get any permissions (including SYSDBA) working with services

Created: 02/Oct/09 02:25 AM   Updated: 12/Nov/09 05:48 PM
Component/s: None
Affects Version/s: 2.5 Alpha 1, 2.5 Beta 1, 2.5 Beta 2
Fix Version/s: 2.5 RC1

Time Tracking:
Not Specified

Planning Status: Unspecified


 Description  « Hide
Using poor documented (at least not mentioned by Borland in 6.0 beta doc) tag isc_spb_command_line one can pass arbitrary trusted user name to service.

 All   Comments   Work Log   Change History   Version Control   Subversion Commits      Sort Order: Ascending order - Click to sort in descending order
Alexander Peshkov added a comment - 02/Oct/09 02:47 AM
Fix contains 2 parts - first was needed to learn some utilities to accept minimum switch length in switch table. Next, service manager must detect that switches in command line.

I understand that in the worst case (when for example database name contains something like trusted_svc) error may be thrown in case of actually valid command line. Unfortunately, there is absolutely no way to distinguish between valid and wrong -trusted_role swicth in utility's command line parser.

The only correct solution is to stop passing normal parameters from services manager to services themself using command line, instead pass ready switchtable (which will be also passed from standalone utility main() function), but I wish to leave it for next FB version.