Comment 5 for bug 1013236

Great, then perhaps the better alternative is to have an option maybe in the openerp-server.conf which enables/disables the manage databases. If disabled it should hide the link on the web and disable (eg access denied error) on the backend controller that allows create, drop, etc - so that those methods can't be executed directly.

With this option we address both concerns.

On Jun 18, 2012, at 8:00, "Amit Parik \(OpenERP\)" <email address hidden> wrote:

> Hello Marcos,
>
> I got you exactly bug some problem on my comment.
>
> It's like this "IF we have put manage databases functionality available
> to the admin AFTER he logs in then there may be possibility he try to
> drop same database on he logs then problem will be generated " how we
> can manage it..??
>
> Thanks and waiting for your reply!
>
> ** Changed in: openobject-server
> Status: New => Incomplete
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1013236
>
> Title:
> disabling manage databases functionality
>
> Status in OpenERP Server:
> Incomplete
>
> Bug description:
> There should be a way to disable the manage databases functionality in
> the login screen, not just removing the link by editing base.xml, but
> the disabling underlying code (controllers, views, etc), so that it
> cannot be tampered with.
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/openobject-server/+bug/1013236/+subscriptions