security problem with connect parameters

[Theod]

Hi,

it's the same for projects or reports!!. If you use connect parameters and store also the password, the password is encrypted => ok.
But you can copy and paste the encrypted-string to other projects or reports and get access.

 

[Marco Kalter]

That is indeed correct. Others can also connect with PL/SQL Developer and change your password through an "alter user identified by ..." command.

Do not store the password if security is an issue.

 

[Theod]

Hi,

that means, if I give an Report with an stored password away so I have to lock the whole report to enctrypt the full textfile.