[Gambas-devel] Gambas Database Manager - Access Denied

Charlie karl.reinl at ...16...
Tue Jun 3 23:09:30 CEST 2003


Ken Schrock schrieb:

> I disagree with his disagreement : -)
>
> Anybody that wants to use Gambas should know RDBMS? Why?
>
> I would like a lot of people to use Linux
> Do any of these corporate types have any idea
> How VERY difficult it is for "average" or "home" users
> To work around all the damn security built into most Linux distros?
>
> If you use Linux or Gambas in an environment where security is important
> Then you are probably getting paid for it, and should know what you 
> are doing
> And should be able to handle the security issues that such an 
> environment entails
>
> Should Joe Blow, who wants to make a small app at home using Gambas
> Know all about RDBMS and climb over a mountain of security to do it? NO.
>
> Yes, Benoit, I would like such a thing, I think most "normal" users would
>
> If corp users want a big security version of Gambas, sell them one : -)
>
>
> Philip A. Chapman wrote:
>
>> Benoit,
>>
>> I believe that this is a bad idea for two reasons.  The first is that it
>> could open up security issues.  The second is that developers should
>> know at least the basics of how an RDBMS they are connecting to works.
>>
>> I can understand that you would like for gambas to hide as many of the
>> mundane stuff as possible, but there is no excuse for a developer not
>> understanding how the RDBMS that his application is using works;
>> especially security.
>>
>> Do everything that you can to create good prompts and error messages
>> when you cannot connect to a database.  Even provide ample
>> documentation.  However, I think installing an all powerful user is a
>> back door style exploit waiting to happen.
>>
>> Thanks,
>>
>> On Tue, 2003-06-03 at 12:07, Benoit Minisini wrote:
>>  
>>
>>> Le Mardi 3 Juin 2003 12:32, Nigel GERRARD a écrit :
>>>   
>>>
>>>> Few weeks or even months !:-) ago there was a thread discussing a 
>>>> problem
>>>> with mysql connects.  A message similar to 'Cannot open database: 
>>>> Access
>>>> denied for user '????@localhost' (Using password: NO..or YES)' occurs
>>>> within the Database Manager.  I am not sure whether this got resolved
>>>> properly since searching the sourceforge.net archives doesn't appear to
>>>> work, but is due to the mysql driver defaulting to database 'mysql' 
>>>> and the
>>>> connecting user not having the privileges to connect to it.
>>>>
>>>> I would suggest that the GDM should produce a warning message for 
>>>> the user
>>>> to check that the connection user has been granted access to database
>>>> 'mysql'.
>>>>     
>>>
>>> Hi, Nigel
>>>
>>> Could it be possible to write a little script to initialize a mysql 
>>> database server (I will the postgresql one) so that a default 
>>> connection to the server works every time ?
>>>
>>> For example, it will create a 'gambas' user with all access, and 
>>> this user will be used by the driver.
>>>
>>> Do you think it is a good idea, or do you think it's better to let 
>>> the root user doing that ?
>>>   
>>
>
is your password ENTER ?

charlie







More information about the Devel mailing list