Security concerns: Setting temporary public options for added security

Setting the value of the login_mode option for a given database to allow a combination of standard, integrated, and Kerberos logins using the SET OPTION statement permanently enables the specified types of logins for that database. For example, the following statement permanently enables standard and integrated logins:

SET OPTION PUBLIC.login_mode = 'Standard,Integrated';

If the database is shut down and restarted, the option value remains the same and integrated logins are still enabled.

Setting the login_mode option using SET TEMPORARY OPTION still allows user access via integrated logins, but only until the database is shut down. The following statement changes the option value temporarily:

SET TEMPORARY OPTION PUBLIC.login_mode = 'Standard,Integrated';

If the permanent option value is Standard, the database will revert to that value when it is shut down.

Setting temporary public options can be considered an additional security measure for database access, since enabling integrated or Kerberos logins means that the database is relying on the security of the operating system on which it is running. If the database is shut down and copied to another computer (such as a user's computer) access to the database reverts to the SQL Anywhere security model and not the security model of the operating system of the computer where the database has been copied.

See also