Application Security 2

[StormbringerX]

Windows XP
SQLServer2000

Hello again,

We currently have new software written in VB6, Server OS is Windows 2000 server, Database SQLSERVER2000, individual PCs are running XP.

The software has been installed on-site and is running very well, however I need a way to limit access to certain programs and functions. The reason for this is that there are some PCs that will be used by lawyers, etc... and the users don't want them to be able to access certain programs, and they definitely don't need to be able modify or delete data. I know I can handle the modify and deletes through permissions to the database, but does anyone have any methods that allow them to prevent users from executing certain reports, accessing control tables, etc...? I would really like to avoid having to put passwords on each function that might need limited access.

Any help or thoughts is appreciated.

Dave

 

[trollacious]

Can you assign an access level to the user when they first log in to the program, then check the access level in the different functions to make sure they have clearance?

In the past, I've used bit masking to check access level for this kind of thing. If you had 8 different access areas (not levels, just areas), then an administrator would have an access number of 255, meaning access to all 8 areas, though I use a higher number to cover more areas being added.

With this method, the administrator would assign access areas depending on the user login. This would take rewriting the program to assign and recognize access areas, though.

Lee

 

[StormbringerX]

I was thinking along similar lines Lee. Let me ask you this, how do you store access levels for the users? By that I mean, do you store it in the Win Registry for that user, or do you hardcode checking for the user name in whatever startup form you use?

 

[johnwm]

Store it in your database. It's easy to program and easy for admin to change as required. Registry is tied to a specific machine, do you can't then have roving users.

________________________________________________________________
If you want to get the best response to a question, please check out FAQ222-2244 first

'If we're supposed to work in Hex, why have we only got A fingers?'

http://www.essexsteam.co.uk

for steam enthusiasts

 

[StormbringerX]

Very good point. And with that method ANY PC could be designated as any type of user. Cool. Thanks