Intriguing OleDB problem

[suityou01]

That's the point he's trying to make. Good security practice is to give the app the least privileges required to do what it needs to do i.e. give it permission to the oracle home directory. By choosing to impersonate another user you have, as a side effect, given it access to everything that user can access which probably includes lots and lots of other things that it doesn't need and probably shouldn't have access to. If the web app were to be exploited and an attacker able to run arbitrary code the range of things they could do is now significantly wider.

Yep, know all of this. Accept all of this. Have clearance from above to do this.
This is a prototype. It serves the purpose of demonstrating that it can be done, and can be done relatively cheaply.

When we get the go ahead to develop this the security issue will be dealt with properly. For now, I just needed a fix to get the prototype working. To get the security permissions changed would require red tape, and this carries a time penalty the luxury of which we currently can ill afford.

The impersonated user has access within the sandbox, and that's about it so the risk is minimal.

I accept eeks comments as entirely valid, and have indicated this many times. The thing I don't accept is his tendancy to have a hissy fit at the slightest hint of a challenge to his suggestions.

 

[eek]

Suity,

You're not on my ignore list as I don't actually mind helping you out. I just hoped you might take the hint when I said do x, do x, do x while you rabbited on about other options.

The main reason why I didn't say don't do Y its a bad idea is because you always want an explanation from elsewhere why and I couldn't provide that from the location I was sat in.

 

[NickFitz]

When we get the go ahead to develop this the security issue will be dealt with properly. For now, I just needed a fix to get the prototype working.

 

[suityou01]

Oh don't you furkin start

 

[suityou01]

Suity,

You're not on my ignore list as I don't actually mind helping you out. I just hoped you might take the hint when I said do x, do x, do x while you rabbited on about other options.

The main reason why I didn't say don't do Y its a bad idea is because you always want an explanation from elsewhere why and I couldn't provide that from the location I was sat in.

Apology accepted.

 

[d000hg]

ignoreList

Oh, the irony

(And since user_name is case sensitive, the query would return no rows anyway)

I was so hoping it would have a bug

 

[doodab]

This is a prototype. It serves the purpose of demonstrating that it can be done, and can be done in a slap dash manner that despite the best of intentions will end up in production because once you've built the prototype they won't be interested in paying for you to build it again.

FTFY