Re: How to deny user changing his own password?

Поиск
Список
Период
Сортировка
Искать
От
Jan Wieck
Тема
Re: How to deny user changing his own password?
Дата
в 12:47:30
Msg-id
3ED638F6.5060301@Yahoo.com
Список
Дерево обсуждения
How to deny user changing his own password? "adeon" <adeon@tlen.pl>
Trewern, Ben wrote:
> Now I think about this it would be useful:  I have an Access database 
> which connects to postgres and the password is saved in the access 
> frontend.  If someone (not sure how!) runs ALTER USER ..... WITH 
> PASSWORD '....'; via the frontend they could disrupt the connection to 
> the postgres backend.  I'm sure a similar situation could happen with 
> PHP or similar as you often don't use the postgres security features to 
> secure your application.

This is the second worst possible reason I can imagine for a feature 
like this. Passwords coded into the frontend ... gosh!


Jan

-- 
#======================================================================#
# It's easier to get forgiveness for being wrong than for being right. #
# Let's break this rule - forgive me.                                  #
#================================================== JanWieck@Yahoo.com #

В списке pgsql-general по дате отправления
От: Trewern, Ben
Дата:
От: Network Administrator
Дата:
FAQ