Kbase 13136: Dictionary File Security only enforced at compile time
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
24/10/2001 |
|
Dictionary File Security only enforced at compile time
If you go into the data dictinary, select Admin/ Security/ Edit
User List. Then add 2 new users, User1 and User2. Then go into
Security/ Change Display Data Security. Now disallow User1 from
Can-create, Can-delete and Can-write.
Now have User1 run test.r which contains one line:
INSERT customer. User1 will be able to do the insert even though they
do not have Can-create permission. Why?
Progress supports compile time security only. See page 5-15 of
the System Administration II manual. You must compile this code and
then run the .r. The .p will give you the correct error message
978 "Insufficient access privilege for table <name>.
Progress Software Technical Support Note # 13136