|
From: Adriano d. S. F. <adr...@gm...> - 2016-05-20 10:45:02
|
On 20/05/2016 05:32, Mark Rotteveel wrote: > Yes it can, but for example the client library (and embedded engine) is > already loaded because that is used by FB/Java itself, so it is available. > > It might be possible to restrict access, but I don't know the Java > SecurityManager well enough to answer that. It might be possible to do > some ClassLoader magic to restrict access to the loaded library, and > then deny access to load it again from other parts, but as the Java code > also most be able to get the 'default' connection (access to the current > connection), that might not be feasible. > > That's not the problem, permissions already work. But FB/Java cannot verify user names and passwords. That is Firebird task and it is avoiding to do it in this needed case. Adriano |