[#CORE-2657] Ability to get any permissions (including SYSDBA) working with services

Firebird Core

Ability to get any permissions (including SYSDBA) working with services

Created: 02/Oct/09 02:25 AM Updated: 12/Nov/09 05:48 PM

Component/s:

None

Affects Version/s:

2.5 Alpha 1, 2.5 Beta 1, 2.5 Beta 2

Fix Version/s:

2.5 RC1

Time Tracking:

Not Specified

Planning Status:

Unspecified

Description

« Hide

Using poor documented (at least not mentioned by Borland in 6.0 beta doc) tag isc_spb_command_line one can pass arbitrary trusted user name to service.

All

Comments

Work Log

Change History

Version Control

Subversion Commits

Sort Order:

[ Permalink | « Hide ]

Alexander Peshkov added a comment - 02/Oct/09 02:47 AM

Fix contains 2 parts - first was needed to learn some utilities to accept minimum switch length in switch table. Next, service manager must detect that switches in command line.

I understand that in the worst case (when for example database name contains something like trusted_svc) error may be thrown in case of actually valid command line. Unfortunately, there is absolutely no way to distinguish between valid and wrong -trusted_role swicth in utility's command line parser.

The only correct solution is to stop passing normal parameters from services manager to services themself using command line, instead pass ready switchtable (which will be also passed from standalone utility main() function), but I wish to leave it for next FB version.