Normal Topic Data base security (Read 569 times)
saw_germany
Member
*
Offline


KISS (Keep it short and
simple)

Posts: 6
Location: Düsseldorf, Germany
Joined: Dec 18th, 2003
Data base security
Mar 31st, 2004 at 1:42pm
Print Post Print Post  
I have created a database named SECURITY.db and a user group named ALL and a user named NOBODY (user level Data entry which is the lowest one).
The group ALL has only the right to read all elements, not to write and not to execute.
NOBODY is a member of the group ALL and therefore he can only read. Ok. NOBODY is a little bit stupid and the administrator want to be sure, that NOBODY doesn’t destroy data. Big surprise: NOBODY can not punch data, but he can delete the complete data record! Oh Oh! – Question: How can I avoid that?

Kind regards
  
Back to top
 
IP Logged
 
Hammer
YaBB Administrator
Lanticans
*****
Offline


Fire bad. Tree pretty.

Posts: 3436
Location: Ohio
Joined: Nov 22nd, 2002
Re: Data base security
Reply #1 - Mar 31st, 2004 at 2:25pm
Print Post Print Post  
The current version of Sesame does not prevent this. We are working on adding this to the Security model for a future release.
  

- Hammer
The plural of anecdote is not data.
Back to top
IP Logged
 
saw_germany
Member
*
Offline


KISS (Keep it short and
simple)

Posts: 6
Location: Düsseldorf, Germany
Joined: Dec 18th, 2003
Re: Data base security
Reply #2 - Mar 31st, 2004 at 8:39pm
Print Post Print Post  
Little bit disappointed. Anyhow: Thank you very much
for the answer!


  
Back to top
 
IP Logged
 
Hammer
YaBB Administrator
Lanticans
*****
Offline


Fire bad. Tree pretty.

Posts: 3436
Location: Ohio
Joined: Nov 22nd, 2002
Re: Data base security
Reply #3 - Mar 31st, 2004 at 8:44pm
Print Post Print Post  
Don't be too disappointed. If testing goes well this particular feature will be available in the very near future. It's been heavily requested, and we do our best to be responsive.  Smiley
  

- Hammer
The plural of anecdote is not data.
Back to top
IP Logged