On Thursday 2019-01-24 19:47:49 Radosław Korzeniewski wrote: > What is funny, when I designed IBAdmin I had a lot of opposite > questions. > :) Why do you need a separate database for IBAdmin data when you already > have one? You will have to connect to it anyway. :)
That's because you were dealing with developers, not with sysadmins. Even experienced developer would see the value of not hijacking other software databases. This is how it looks from sysadmin's perspective: - it is not flexible thus restricting use of underlaying technology (separate use database access with lowered privileges and additional restrictions) - it is dangerous (cannot be used with real data) - it has flaw in its design (security and maintenance related) - it doesn't use its own database to write its own data but uses the database of a third-party software which is huge no-no If all of the above was not true we wouldn't have this discussion at all. It's not about paranoia, it's about best practices and common sense. Isolation is not something that should rely explicitly on the third-party software using its role-based access but also on a system mechanisms as well. > Do you think an > average Bacula user or even a newbie who have a serious problems to > setup a basic Bacula installation (just check bacula-users mailing > list) will be happy when he has to setup an another database just to > use a simple IBAdmin when all other Bacula GUIs do not require it? > I think it is impossible to make everybody happy. :) In most cases you simply cannot make everybody happy but then you should chose the right solution, not the easiest one. > From technical point of view it is possible to redesign IBAdmin to use > multiple databases, but it requires some development which (in my > opinion) has no real value. If you think this kind of separation has > any real value other then "do separation - it is good" I'll be happy if > you will share it with me. Well, this tread is going for some time now and I already saw some good arguments all of which are in line with what I wrote above. I hope that you will manage to see the problem from a maintenance and administration view, not just from a "newby trying to setup professional Backup system" view. :-) If a number of people are trying to point out the concrete problem, the worst thing you could do would be to defend the software instead of considering to modify it. Regards! -- Josip Deanovic _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
