orientdb-studio icon indicating copy to clipboard operation
orientdb-studio copied to clipboard

OrientDB Studio allows to view data without knowing user credentials

Open dijef opened this issue 5 years ago • 0 comments

We're using OrientDB with desktop application where database is stored in local files. By using OrientDB Studio, any database can be opened by root. You don't need to know users created on database itself. This allows PC users to read data from database. Situation is improved by setting encryption key on database, however if this is known, behaviour is the same. Is this desired behaviour (that root opens any database and encryption key protects all content) or can this be disabled?

dijef avatar Apr 21 '20 15:04 dijef