Probs with WebExplode and Table Priviledges...
Hello,
we have developed a simple web interface allowing for the execution
of SQL statements entered by the user. The webdriver is configured
to connect as a low-priviledged user (using MI_USER & MI_PASSWWORD),
i.e., the user only has connect and select priviledges.
By using the 'webexplode' function via the webdriver or invoking it
directly in dbaccess, the user can circumvent all table priviledges.
Is this a bug of the 'webexplode'-function or are there any workarounds?
Best regards,
Henrik
--
/----------------------------------------------------------------------\\
|Henrik Loeser | email: loeser@informatik.uni-kl.de |
|Dept. of Computer Science | http://www.uni-kl.de/AG-Haerder/Loeser/ |
|University of Kaiserslautern| |
|P.O. Box 3049 | Phone: (+49) 631 205 3283 |
|D-67653 Kaiserslautern | Fax : (+49) 631 205 3299 |
|Germany | |
\\----------------------------------------------------------------------/
"asd dsjiusa sdasd uhiuh hhhajief okas aksjda lkja ytf!"