user setup and server
Wednesday, 2 November 2011 · 5 messages · last reply 3 Nov 2011
CG
Hi Pascal,
Quoted text · Pascal Heus · 2 lines
> Just started to configure various user accounts. Does the server need a > restart in order for new accounts to be recognized?
new user accounts are instantly activated.
Quoted text · Pascal Heus · 2 lines
> Also, I would recommend the default privileges to be none or read at > best. New accounts should not be able to write to the DB by default.
That could be changed pretty easily; what do others think?
Christian
PH
Pascal Heus2 Nov 2011 22:31 #
All:
Just started to configure various user accounts. Does the server need a restart in order for new accounts to be recognized?
Also, I would recommend the default privileges to be none or read at best. New accounts should not be able to write to the DB by default. best
*P
PH
Christian:
Running 7.0.1 under Amazon Linux. I use the "basex" script to create a new user. If I then call basexclient or use a pHp client with the new credentials, I get an access denied. It works fine after I restart the service. Note that server is launched as a service using "basexhttp -S". Could this make any difference?
best
*P
Quoted text · Christian Grün · 12 lines
On 11/2/11 4:37 PM, Christian Grün wrote: > Hi Pascal, > >> Just started to configure various user accounts. Does the server need a >> restart in order for new accounts to be recognized? > new user accounts are instantly activated. > >> Also, I would recommend the default privileges to be none or read at >> best. New accounts should not be able to write to the DB by default. > That could be changed pretty easily; what do others think? > Christian >
JC
Jan Vlčinský (CAD)3 Nov 2011 07:45 #
Quoted text · Pascal Heus · 2 lines
> > It is all about ease of use and security.
As handling user accounts is already not the beginner task, I would see reasonable not to grant any rights by default, as Pascal proposed.
Jan
Quoted text · Pascal Heus · 30 lines
On 3 November 2011 05:43, Pascal Heus <pascal.heus at gmail.com> wrote: > Christian: > >> Running 7.0.1 under Amazon Linux. I use the "basex" script to create a > >> new user. If I then call basexclient or use a pHp client with the new > >> credentials, I get an access denied. It works fine after I restart the > >> service. Note that server is launched as a service using "basexhttp > >> -S". Could this make any difference? > >> best > *P > > > On 11/2/11 4:37 PM, Christian Grün wrote: > > Hi Pascal, > > > >> Just started to configure various user accounts. Does the server need a > >> restart in order for new accounts to be recognized? > > new user accounts are instantly activated. > > > >> Also, I would recommend the default privileges to be none or read at > >> best. New accounts should not be able to write to the DB by default. > > That could be changed pretty easily; what do others think? > > Christian > > >
CG
Christian Grün3 Nov 2011 14:12 #
Quoted text · Jan Vlčinský (CAD) · 3 lines
> It is all about ease of use and security. > As handling user accounts is already not the beginner task, I would see > reasonable not to grant any rights by default, as Pascal proposed.
..fine; from now on, new users won't have any permissions granted. I've updated our code base and uploaded new snapshots.
Christian
Written for BaseX 7.0. BaseX may have changed since: please check the current documentation.
⚡Generated with XQuery