![]() | |
![]() |
| | Thread Tools | Display Modes |
#1
| |||
| |||
|
#2
| |||
| |||
|
|
I was creating a new user with only SELECT permission on some tables owned by DBA. If I connect this database using this new user it is possible to see content of all procedures and functions. Wow to prevent an user to see this this code? |
#3
| |||
| |||
|
|
Heiko Helbig wrote: I was creating a new user with only SELECT permission on some tables owned by DBA. If I connect this database using this new user it is possible to see content of all procedures and functions. Wow to prevent an user to see this this code? Yes, any user with connect permissions can see procedure code by default. You can obfuscate the source with the following command : ALTER PROCEDURE p1 SET HIDDEN; -- Reg Domaratzki, Sybase iAnywhere Solutions Please reply only to the newsgroup Documentation : Exercise your WRITE @DocCommentXchange: DCX.sybase.com SQL Anywhere Patches and EBFs : http://downloads.sybase.com/swd/base.do -> Choose SQL Anywhere -> Optionally set filter to "Display ALL platforms IN ALL MONTHS" |
#4
| |||
| |||
|
|
In addition to hiding stored procedures, there are SET HIDDEN clauses for the ALTER FUNCTION, ALTER EVENT, ALTER VIEW, and ALTER TRIGGER statements as well. And if you use @configuration files you can obfuscate those with the dbfhide as well. All in all there should be a way to protect your intelligent properties with one of the above (and below) features. "Reg Domaratzki [Sybase iAnywhere]" <firstname.lastname (AT) ianywhere (DOT) com wrote Heiko Helbig wrote: I was creating a new user with only SELECT permission on some tables owned by DBA. If I connect this database using this new user it is possible to see content of all procedures and functions. Wow to prevent an user to see this this code? Yes, any user with connect permissions can see procedure code by default. You can obfuscate the source with the following command : ALTER PROCEDURE p1 SET HIDDEN; -- Reg Domaratzki, Sybase iAnywhere Solutions Please reply only to the newsgroup Documentation : Exercise your WRITE @DocCommentXchange: DCX.sybase.com SQL Anywhere Patches and EBFs : http://downloads.sybase.com/swd/base.do -> Choose SQL Anywhere -> Optionally set filter to "Display ALL platforms IN ALL MONTHS" |
#5
| |||
| |||
|
|
Many thanks to both of you. I will try this immediately. Am 09.12.2009 19:15, schrieb Nick Elson [Sybase iAnywhere]: In addition to hiding stored procedures, there are SET HIDDEN clauses for the ALTER FUNCTION, ALTER EVENT, ALTER VIEW, and ALTER TRIGGER statements as well. And if you use @configuration files you can obfuscate those with the dbfhide as well. All in all there should be a way to protect your intelligent properties with one of the above (and below) features. "Reg Domaratzki [Sybase iAnywhere]" <firstname.lastname (AT) ianywhere (DOT) com wrote Heiko Helbig wrote: I was creating a new user with only SELECT permission on some tables owned by DBA. If I connect this database using this new user it is possible to see content of all procedures and functions. Wow to prevent an user to see this this code? Yes, any user with connect permissions can see procedure code by default. You can obfuscate the source with the following command : ALTER PROCEDURE p1 SET HIDDEN; -- Reg Domaratzki, Sybase iAnywhere Solutions Please reply only to the newsgroup Documentation : Exercise your WRITE @DocCommentXchange: DCX.sybase.com SQL Anywhere Patches and EBFs : http://downloads.sybase.com/swd/base.do -> Choose SQL Anywhere -> Optionally set filter to "Display ALL platforms IN ALL MONTHS" |
![]() |
| Thread Tools | |
| Display Modes | |
| |