Please add a default Guest user to AuthUsers when creating the table

Bascy · 2012-09-13 09:30:49

This will make it much simpler to test authentication on a default database as it adds a restricted user who restrictions can be tested immediatly

ab · 2012-09-13 14:46:57

TSQLAuthGroup.InitializeTable will now create a new 'Guest' AuthUser row, with a void ('') password.

But I wonder if it is not a security concern...

mpv · 2012-09-13 20:44:44

I think it`s bad idea. For example, if I install any database server or linux distributive there is no guest user in it, is it?

Bascy · 2012-09-14 06:10:06

Why not add the Guest user with the same password as User, Admin, Supervisor .. that way you can't be comprising the security any more than you already do?

ab · 2012-09-14 06:23:40

I did not add the Guest user by default, for security reasons.

In all cases, any application should change the user settings, at least the default password!

If it is about automated testing, you can change the groups / users as expected, with just some lines of code.

mORMot Open Source

#1 2012-09-13 09:30:49

Please add a default Guest user to AuthUsers when creating the table

#2 2012-09-13 14:46:57

Re: Please add a default Guest user to AuthUsers when creating the table

#3 2012-09-13 20:44:44

Re: Please add a default Guest user to AuthUsers when creating the table

#4 2012-09-14 06:10:06

Re: Please add a default Guest user to AuthUsers when creating the table

#5 2012-09-14 06:23:40

Re: Please add a default Guest user to AuthUsers when creating the table

Board footer