in reply to From string with variable Address to actual referencing that address? (core crypting problem)

Each process has its own memory space. A pointer cannot be passed between processes. Think about it this way: If a process could see $dbh, it could also see $db_pass.

I dou't see the point of this exercise. If you give them access to the database, what does it matter whether they know the password or not?

  • Comment on Re: From string with variable Address to actual referencing that address? (core crypting problem)

Replies are listed 'Best First'.
Re^2: From string with variable Address to actual referencing that address? (core crypting problem)
by Julgon (Initiate) on Apr 19, 2011 at 16:37 UTC

    Its all because of the security and roles delegation the company has...

    The SCM admin could see the scripts (and make new version with new features), but they want him to not have access to the actual credentials of the database (thats for the dba)

    Sadly company rules... not mine

    Any alternative for what i need?

[reply]

      but they want him to not have access to the actual credentials of the database (thats for the dba)

      Giving them the dbh is also giving them the credentials. Credentials don't just come in the form of passwords, and passwords aren't necessarily credentials on their own (say if you only accept connections from certain IP addresses).

[reply]

        I understand where you are coming from, the thing is im not the boss, so as illogical as theirs security rules are, i cannot change them (actually thats not true, i could change them, but that'll mean nobody would had the access to the source code and will greatly delay developing time).

        Still, is there a any way of actually handle a cripted information, or make something where the source code handle a crypted information (with no posibility of simple decryption). Or Some dark way of integrated a .pl with an exed pl script?

        Thanks
[reply]

In Section Seekers of Perl Wisdom