Perfect Luca, thanks for the response. I will test this so I can close this issue internally.
On Tue, Aug 18, 2015 at 2:13 PM, Luca Garulli <[email protected]> wrote: > Hi, > In this case the default user and password are taken: "admin". Try to > change the admin's password and you'll see the ETL will be not able to > connect to the server anymore. > > Best Regards, > > Luca Garulli > Founder & CEO > OrientDB <http://orientdb.com/> > > > On 18 August 2015 at 19:41, Gregory Pierce <[email protected]> > wrote: > >> Not sure I understand your answer. The ETL is able to load data into a >> database that it has never connected to and to which I don't have any >> credentials for. Essentially I can upload any random data to that instance >> without having to provide any credentials at all. That's definitely not >> right, so I'm looking for how to secure the database such that an ETL >> cannot push data to the database and bypass the security which the database >> driver provides. >> >> Today if I want to connect to the database I need a user/password. If I >> don't have that I can't connect. That's good. However if I ETL to that >> database I can upload data to it without knowing the user/password. That's >> awful! >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "OrientDB" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. >> > > -- > > --- > You received this message because you are subscribed to a topic in the > Google Groups "OrientDB" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/orient-database/XhHuInXNA3g/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "OrientDB" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
