Tim

Two requests:

1. can we have a reveal password button on the alter / create user dialog please (after all anyone who can get there can just query the database to get it in clear)

2. can we have non-printable characters as part of the user name and password

The first one is for convenience, the second because I'd like to be able to create users that get used in my app but are at least very difficult to log onto.

Roy Lambert

Roy,

<< 1. can we have a reveal password button on the alter / create user dialog
please (after all anyone who can get there can just query the database to
get it in clear) >>

Noted.

<< 2. can we have non-printable characters as part of the user name and
password >>

You should be able to do so already as far as ElevateDB is concerned,
although I'm not sure what can be done if the TEdit doesn't allow them to be
entered.

--
Tim Young
Elevate Software
www.elevatesoft.com

Tim

><< 2. can we have non-printable characters as part of the user name and
>password >>
>
>You should be able to do so already as far as ElevateDB is concerned,
>although I'm not sure what can be done if the TEdit doesn't allow them to be
>entered.

After deciding I couldn't type bell or tab I tried some of the higher characters and got

---------------------------
ElevateDB Manager
---------------------------
ElevateDB Error #406 Invalid user identifier '«««'
---------------------------
OK  
---------------------------

I also just tried

CREATE USER #8
PASSWORD '«¬­'

and was told ElevateDB Error #700 An error was found in the statement at line 1 and column 13 (Expected user name but instead found #8)

Later on I'll try in a mini app.

Roy Lambert

Roy,

<< After deciding I couldn't type bell or tab I tried some of the higher
characters and got >>

Yes, using non-printable characters with identifiers is definitely not
supported.  Valid characters for identifiers are described here:

http://www.elevatesoft.com/manual?action=mantopic&id=edb2sql&category=0&topic=6

However, the password and description should be able to handle them.

May I ask why you want to use non-printable characters for identifiers ?

--
Tim Young
Elevate Software
www.elevatesoft.com

Tim


<<the second because I'd like to be able to create users that get used in my app but are at least very difficult to log onto>>


Roy Lambert

Roy,

<< the second because I'd like to be able to create users that get used in
my app but are at least very difficult to log onto>>

Which I understand for the password.  I was asking about the user name.  The
user name is not where the security is.

--
Tim Young
Elevate Software
www.elevatesoft.com

Tim


My view is the security is in the username/password combination with the username being the public part. Making that difficult to type in decreases the chances of people even trying it and hence increases the security.

No big deal if its not possible.

Roy Lambert