Openedge 10.1A and blank user

[BKiddo]

Hi all, how can I test that a connection with a blank user is possible?

 

[TomBascom]

Start a session against the db without giving it a username.

If you are prompted for a username type ^E on UNIX or <ESC> on Windows.

Then, at the editor, execute:

display userid.

 

[BKiddo]

Thanks! what should be done to avoid this issue?

 

[TomBascom]

The simplest thing to do is to go into data administration and disable blank user access.

 

[BKiddo]

I have been reading about _CAN-* are they stores in a specific table?

 

[TomBascom]

Yes, they are part of the meta-schema.

for each _file no-lock where _hidden = no:
  display _file.
  for each _field no-lock of _file:
    display _field.
  end.
end.

 

[BKiddo]

How can I understand a record like this:

"_Sysdbauth" -81 "*" "*" "*" "*" "" ? "" yes "_Sysdbauth" 2898 ? "*" "*" ? ? ? "PUB" "PUB" "S" ?

 

[TomBascom]

That depends on what part of it you don't understand.

Obviously you ran some query other than the one that I posted to get that result.

Clearly I could just parrot the field names and descriptions but I don't see how that would be helpful. What is it that you want to know? And why do you feel that it is important?

 

[BKiddo]

Tom:

This is the result from the query you posted:

File-Name File-Number
Can-Create
Can-Read
Can-Write
Can-Delete
Desc
Valexp
Valmsg
Frozen Dump-name CRC File-Label
Can-Dump
Can-Load Valmsg-SA
File-Label-SA ianum Creator
Owner Tbl-Type User-Misc
-------------------------------------------------------------------------
VENPRTV 371
*
*
*
*
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
?
no venprtv 37032 venprtv
*
* ?
? 7 PUB
PUB T ?


From this and taking in count that Blank user is not bloqued is it possible that any user can at least read this table?

 

[TomBascom]

Yes. Any user can create, read, write or delete records in that table.