Re: SQL backend: Where do we store the password?

2013-07-03 Thread Geert Janssens
On 02-07-13 20:53, Christian Stimming wrote: Dear Geert or John or whoever knows this, where does gnucash store the database password for MySQL or PostgreSQL backend? It stores the database name, host, and username directly in the URI, which is also visible in the file history. The URI (without

SQL backend: Where do we store the password?

2013-07-02 Thread Christian Stimming
Dear Geert or John or whoever knows this, where does gnucash store the database password for MySQL or PostgreSQL backend? It stores the database name, host, and username directly in the URI, which is also visible in the file history. The URI (without the password) is also stored in gconf and

Re: Feature discussion: Access restriction for gnucash files by password

2013-06-27 Thread Tommy Trussell
On Thu, Jun 27, 2013 at 9:04 AM, Derek Atkins wrote: > Tommy Trussell writes: > > > I know this goes beyond the measures you have described, but doesn't the > > zip compression library include support for a password? What if (when > using > > compressed xml) Gn

Re: Feature discussion: Access restriction for gnucash files by password

2013-06-27 Thread Derek Atkins
Tommy Trussell writes: > I know this goes beyond the measures you have described, but doesn't the > zip compression library include support for a password? What if (when using > compressed xml) GnuCash included the password when compressing and > uncompressing the file? We do

Re: Feature discussion: Access restriction for gnucash files by password

2013-06-26 Thread Tommy Trussell
conveys a false sense of security and that simply having separate > > > userids is a better solution. > > > > > > Note that the MySql and Postgresql backends do provide for > > > authentication, but we defeat it by storing the userid and > > > password. In

Re: Feature discussion: Access restriction for gnucash files by password

2013-06-26 Thread Geert Janssens
t; userids is a better solution. > > > > Note that the MySql and Postgresql backends do provide for > > authentication, but we defeat it by storing the userid and > > password. In those cases we should pop up the authentication > > dialog rather than storing the

Re: Feature discussion: Access restriction for gnucash files by password

2013-06-26 Thread Christian Stimming
l backends do provide for authentication, > but we defeat it by storing the userid and password. In those cases we > should pop up the authentication dialog rather than storing the > credentials rather than using a KVP parameter on the book. Where do we store the passwords? Just in the fu

Re: Feature discussion: Access restriction for gnucash files by password

2013-06-26 Thread Derek Atkins
itor. >> Note that the MySql and Postgresql backends do provide for >> authentication, but we defeat it by storing the userid and password. >> In those cases we should pop up the authentication dialog rather >> than storing the credentials rather than using a KVP pa

Re: Feature discussion: Access restriction for gnucash files by password

2013-06-26 Thread Geert Janssens
On Tuesday 25 June 2013 14:20:33 John Ralls wrote: > On Jun 25, 2013, at 1:30 PM, Christian Stimming > wrote: > > I'd like to discuss a possible implementation for the following > > feature request: > > > > Allow the database to be secured by way

Re: Feature discussion: Access restriction for gnucash files by password

2013-06-25 Thread John Ralls
On Jun 25, 2013, at 1:30 PM, Christian Stimming wrote: > I'd like to discuss a possible implementation for the following feature > request: > > Allow the database to be secured by way of a password (Bug 700803) > http://gnucash.uservoice.com/suggestions/1547269 >

Feature discussion: Access restriction for gnucash files by password

2013-06-25 Thread Christian Stimming
I'd like to discuss a possible implementation for the following feature request: Allow the database to be secured by way of a password (Bug 700803) http://gnucash.uservoice.com/suggestions/1547269 The aim is not actual security in the sense of encryption, but just to prevent casual a

Re: Password

2010-04-21 Thread Geert Janssens
On Tuesday 20 April 2010, Andriono Tobuhu wrote: > dear admin > > can you make option for Password Security for access GnuCash, so we > can protect our GnuCash data from others > > is there option for it..?? > > thanks before > http://

Password

2010-04-21 Thread Andriono Tobuhu
dear admin can you make option for Password Security for access GnuCash, so we can protect our GnuCash data from others is there option for it..?? thanks before -- --- Get Free Voip Pc To Phone : http://voippctophone.blogspot.com

Re: GnuCash password features

2007-03-20 Thread Perry E. Metzger
"Mendy, Gaspard \(UK - London\)" <[EMAIL PROTECTED]> writes: > Dear sir/madam, > I am conducting a review of some of the key applications used by our > clients at Deloitte Enterprise Risk Services, particluarly around > password controls. I understand my colleag

Re: GnuCash password features

2007-03-20 Thread Josh Sled
On Tue, 2007-03-20 at 16:22 +, Mendy, Gaspard (UK - London) wrote: > I am conducting a review of some of the key applications used by our > clients at Deloitte Enterprise Risk Services, particluarly around [...] > provide me with the following information relating to the password

GnuCash password features

2007-03-20 Thread Mendy, Gaspard \(UK - London\)
Dear sir/madam, I am conducting a review of some of the key applications used by our clients at Deloitte Enterprise Risk Services, particluarly around password controls. I understand my colleague Khiran Mohit tried to get in touch, albeit unsuccessfully, sometime in February (by email) in order to

Re: Gnucash password protection and encryption

2001-03-04 Thread Jan Schrage
On Fri, Mar 02, 2001 at 10:20:49AM -0500, Derek Atkins wrote: > Jan Schrage <[EMAIL PROTECTED]> writes: > > > Wellthis at least is only true in theory. There's hardly anything > > that's easier than getting root access on a machine you've got an > > account on, especially on a standard linux

Re: Gnucash password protection and encryption

2001-03-01 Thread Derek Atkins
/password (or other authentication) to prove to the server that you have access to the files. But this is a ways off from now. -derek Robert Graham Merkel <[EMAIL PROTECTED]> writes: > [EMAIL PROTECTED] writes: > > Hi, > > > > Sounds like not a bad idea, yo

Re: Gnucash password protection and encryption

2001-03-01 Thread Robert Graham Merkel
using Gnucash regularly, its really great. > > > > But I have one problem, security. > > > > Could you please add an option to protect the saved files with a password, or > > better, call gnupg to encrypt the files when saving them ? And then extract > >

Re: Gnucash password protection and encryption

2001-03-01 Thread linas
please add an option to protect the saved files with a password, or > better, call gnupg to encrypt the files when saving them ? And then extract > them when loading ? > > What do you thing of that ? > > Thanks very much for your great work. > > CU Booster > >