Alex Peshkoff wrote: > Yes, and this is like all secure daemons work. Have you ever > seen something like DNS server, which changes it's configuration > itself? Or HTTP server, doing such tricks? File sharing daemon > like samba can change own configuration if it's conf file is > shared, but for me this means badly administered site. (And > even in this case one can't make changes active, i.e. restart > samba). Why should database access server modify his > configuration?
Because he can? More seriously. Yes I know there are important security considerations BUT I thought perhaps people were overlooking what I see as the biggest potential advantage of the request. Just because it is a risk does not take away the potential for advantage. You have to weigh the two and decide whether the risk is worth the cost ... or not. ... > To have all mentioned facilities one needs another tool - > additional service to manage server operation. And such tools > exist - see for example fbDataGuard. Yep, or the developer can write their own. New APIs new source, new requirements, greater complication. Extra tools also have their cost (from the perspective of the developer) and are not, necessarily, inherently more secure. The solution proposed would (or could be) be more simple (for a developer using Firebird) than finding and implementing something completely separate. It may even be more secure that some possibilities. I can certainly see why people are wary of leaping to adopt the idea, but I think the request is worth of serious discussion, rather than immediate discard because there is some risk. -- Geoff Worboys Telesis Computing ------------------------------------------------------------------------------ Forrester Wave Report - Recovery time is now measured in hours and minutes not days. Key insights are discussed in the 2010 Forrester Wave Report as part of an in-depth evaluation of disaster recovery service providers. Forrester found the best-in-class provider in terms of services and vision. Read this report now! http://p.sf.net/sfu/ibm-webcastpromo Firebird-Devel mailing list, web interface at https://lists.sourceforge.net/lists/listinfo/firebird-devel
