The bigger threat is the ODBC/OLE-DB Connects as there are more chance of
someone having SQL knowledge and being able to use Excel to access the
database and update and delete records.  This is a problem for Oracle, SQL
Server and other Databases.

Regards
David Jordan

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Piers Angliss
Sent: Tuesday, 31 May 2005 9:35 PM
To: [email protected]
Subject: RE: [U2] Uniobjects hack

I agree it's unlikely, but it's something that needs to be considered

I can't remember whether your branches are running PCs or dumb terminals but
if the former, would you be happy to roll out an Excel/ UniObjects reporting
tool/solution given your user population and distribution, some of whom
might be IT students (or ageing U2 developers :-) ) working in part-time/
temporary positions ?

I know I'd be wary of recommending it to you without clearly explaining the
risks

Piers

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Les Hewkin
Sent: 31 May 2005 11:09
To: [email protected]
Subject: RE: [U2] Uniobjects hack


I have been following this thread with great intrest. The issues seems to be
that if someone has Excel, UniObjects and knows how U2 works that they can
gain access to the data.

Where are these people? Are they working for the IT department?

Is this a real life scenario? or an exercise in theory of what might happen?

Les
-------
u2-users mailing list
[email protected]
To unsubscribe please visit http://listserver.u2ug.org/
-------
u2-users mailing list
[email protected]
To unsubscribe please visit http://listserver.u2ug.org/

Reply via email to