To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=89534





------- Additional comments from [EMAIL PROTECTED] Mon May 19 21:32:57 +0000 
2008 -------


[EMAIL PROTECTED]>fs@:

> Damn, did we forget this announcement ....

I don't know if you forgot it, at least I didn't know


> This change was made as response to security concerns
> brought to the OOo team.

Here I wonder if this is really a security issue: in order to use a store
procedure, one has to:

* add the JAR class path via the Options dialog (well, an evil person can write
in /user/config/javasettings_[Linux_x86].xml)

* for every ODB file, one has to create an alias for the stored procedures, and
this can only be done execute a SQL statement (an evil person can do this via a
Job OnLoad/OnNew)

Are there users so naive to be fooled by such an evil person?

And on the other side, this has a big drawback: before you could just write your
Java static methods and add the JAR to the class path. Now one has to create an
extension (at least with for the DataAccess.xcu). And distributing stored
procedures with extensions does not work: one has to add the JAR to the class
path anyway.

---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to