DevForce Community Forum : DB having own security using user tables http://www.ideablade.com/forum/ This is an XML content feed of; DevForce Community Forum : DevForce 2010 : DB having own security using user tables Wed, 29 Jul 2026 21:36:03 -700 Fri, 13 May 2011 10:21:07 -700 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 9.69 360 www.ideablade.com/forum/RSS_post_feed.asp?TID=2669 DevForce Community Forum http://www.ideablade.com/forum/forum_images/IdeaBlade_logo_tm.png http://www.ideablade.com/forum/ DB having own security using user tables : Thank you for the answer.Sadly,... http://www.ideablade.com/forum/forum_posts.asp?TID=2669&PID=10680#10680 Author: Stecy
Subject: 2669
Posted: 13-May-2011 at 10:21am

Thank you for the answer.

Sadly, the system we have cannot be changed and the method of authenticating users is what I described.

Since there's no way to accomodate this then I fear DevForce would not be a perfect fit in our case.

I really hope there is a way though...
]]> Fri, 13 May 2011 10:21:07 -700 http://www.ideablade.com/forum/forum_posts.asp?TID=2669&PID=10680#10680 DB having own security using user tables : Here is a page on our DRC (DevForce... http://www.ideablade.com/forum/forum_posts.asp?TID=2669&PID=10667#10667 Author: DenisK
Subject: 2669
Posted: 12-May-2011 at 4:17pm

Here is a page on our DRC (DevForce Resource Center) that explains how Query Interceptor and Query Filters work.

http://drc.ideablade.com/xwiki/bin/view/Documentation/query-server-lifecycle-events
]]> Thu, 12 May 2011 16:17:43 -700 http://www.ideablade.com/forum/forum_posts.asp?TID=2669&PID=10667#10667 DB having own security using user tables : Hi Stecy;The answer is yes and... http://www.ideablade.com/forum/forum_posts.asp?TID=2669&PID=10666#10666 Author: DenisK
Subject: 2669
Posted: 12-May-2011 at 2:16pm

Hi Stecy;

The answer is yes and no.

No, because we are not certain of the lifetime of the CONTEXT_INFO. We open/close the DB connection as needed and don't expose it at the application level. Thus, each connection issued to the db may results in a different session.

The answer is yes, if you can move away from using CONTEXT_INFO. DevForce uses role-based security within the application level, not the database, based on the principal. We have what we called Query Interceptor and Query Filters that supports this same concept, but on an application level instead of the database level.

Hope this helps.

]]> Thu, 12 May 2011 14:16:30 -700 http://www.ideablade.com/forum/forum_posts.asp?TID=2669&PID=10666#10666 DB having own security using user tables : Hi,We have a SQL database where... http://www.ideablade.com/forum/forum_posts.asp?TID=2669&PID=10643#10643 Author: Stecy
Subject: 2669
Posted: 11-May-2011 at 12:05pm

Hi,

We have a SQL database where an application always log using the same credentials regardless of the user using it.
However, the application must open a user session and it is implemented by using a user table in the database.

Furthermore, some tables, views, sprocs are protected using this mechanism by using a SQLServer CONTEXT_INFO set by the application. This context info contains a session id and the sproc executes only if the CONTEXT_INFO contains this session id and the session allows execution for the user (derived from the session id and user table).

Does DevForce support this scenario?]]> Wed, 11 May 2011 12:05:41 -700 http://www.ideablade.com/forum/forum_posts.asp?TID=2669&PID=10643#10643