[Progress Communities] [Progress OpenEdge ABL] Forum Post: Database is allowing operations even for non-existing users

  • Thread starter Thread starter qasimpatwekar
  • Start date Start date
Status
Not open for further replies.
Q

qasimpatwekar

Guest
Hi All, Good day to you. Progress version:11.6 OS:Red Hat Enterprise Linux Server release 7.5 One of our customer uses secondary broker (SQL), we noticed that: 1) When connect to the database using sqlexp: sqlexp –db dbname –S It is logging into database with OS level user. 2) sqlexp –db dbname –S -user Any name we can give(ex, abc,xyz) database is allowing to connect DB and if we can grant anything for particular user-name(nonexistent name) for a table, database is allowing to do particular operation against database. I also understand that if we add _user record then only _user can access db through sqlexp. But customer do not want to create the _user record. Can you share your input on what is the solution here and How security for progress database works here? Thanks, Qasim.

Continue reading...
 
Status
Not open for further replies.
Back
Top