Book a Demo

Author Topic: Preventing the option to write sql query  (Read 2950 times)

shirleyj

  • EA User
  • **
  • Posts: 29
  • Karma: +0/-0
    • View Profile
Preventing the option to write sql query
« on: April 27, 2011, 11:57:49 pm »
Hi to all,
Is there any way i can prevent the option, to search info in a model using sql queries?
i want to prevent this option for some of my EA users.
Thanks in advance,
shirley.

qwerty

  • EA Guru
  • *****
  • Posts: 13584
  • Karma: +397/-301
  • I'm no guru at all
    • View Profile
Re: Preventing the option to write sql query
« Reply #1 on: April 28, 2011, 02:29:05 am »
AFAIK there is no such option. The question is why you want to prevent that. The SQL reveals some cryptic additional data to what you see in the Project Browser. But nothing of real importance. Anyway, you can open a native SQL execution tool for your database and do even bad things. Not only SELECT but UPDATE and DELETE.

q.

shirleyj

  • EA User
  • **
  • Posts: 29
  • Karma: +0/-0
    • View Profile
Re: Preventing the option to write sql query
« Reply #2 on: April 28, 2011, 03:40:56 pm »
due to information security request, i need to at list try to prevent the access to the queries.
for ex: everyone can write a query to see the users list in the EA..it's a security issue (so i have been told..)
you have an idea for something else i can do, to maybe hide some of the tables in my DB, so that even running a query wouldn't show me info.??
thank's again.
shirley.

Geert Bellekens

  • EA Guru
  • *****
  • Posts: 13523
  • Karma: +574/-33
  • Make EA work for YOU!
    • View Profile
    • Enterprise Architect Consultant and Value Added Reseller
Re: Preventing the option to write sql query
« Reply #3 on: April 28, 2011, 05:12:00 pm »
Shirley,

I'm afraid there is no easy solution.
If you want those users to be able to edit the model you'll have to give them rights to the database.
And if they have rights to the database, they can do bad things.
Disabling the SQL Query feature would do not much good as there are lots of other ways to query the database.
If you are worried about user security, I think you better use windows authentication iso EA user/passwords.
EA stores the passwords hash in the database, so if someone has the same password as you, the hash will be the same.

On the other hand, just how big is the security risk is someone would be able to login into EA with someone else's username?

Geert