Good resources for that:

http://groups.google.com/group/gears-users/browse_thread/thread/24b953308afb6e2a/b9685f2b835c670c

and

http://groups.google.com/group/gears-users/browse_thread/thread/89a964fc04356fdb/a72b1c2acc3de1e8?hl=en&q=#a72b1c2acc3de1e8

I already answered on those topics, and I will just put the summary
here: If we are concerned about the security of the data stored in
local gears DB, means that there is already an "intruder" that have
full access to the local machine and in this case it is impossible to
develop a 100% safe security. Only thing that can be done is to keep
the crypted data in local DB that you will decrypt on demand. This
will protect the data if only the db file is stolen, but will be no
help if there is full computer access (the "intruder" will have access
to the locally stored decrypt algorithm).

General idea: do not store sensitive data on offline mode!



On May 11, 1:18 am, fvisticot <[email protected]> wrote:
> I have read some post related to the security pb linked to the gear
> database.
> I have created an application who store customer infos in the gear db.
> What is the solution to protect the access of this db only for this
> customer ?
> Is it possible to access this db with login / pwd ?
> Is there other solution to restrict the db access ?
> Is something planed in next releases ?

Reply via email to