Tranquil IT Forum

Good morning,

I just noticed this morning that the contents of the local database file waptdb.sqlite is clear.

Full file path: The entire contents of the packages executed on the machine can be read in plain text.

The problem is that the file can be read by all users.

Is this normal, or have I misconfigured my installation?

Sincerely,

Guillaume

This is perfectly normal; our documentation explains it clearly:


https://www.wapt.fr/fr/doc/wapt-create- ... pt-package

Since session-setup needs it to execute the code located in that same database,

if you need to store sensitive information in a package, you must follow the example in the documentation.

Thank you for your reply!

I completely missed that part of the documentation.

Out of curiosity, why wasn't the file encrypted?

Hi Guillaume,

the `def session-setup()` function must be readable by the user when the session is opened, so it must be readable in a standard user context.

Regards,

Denis

Hello,

Okay, I understand the logic better now.

Thank you for your reply.