Restricting data access

[rohbe]

I would like to set up data so that it can not be accessed by users outside of the application that is being run - I was thinking of putting the data on a network folder and having the application do a log in to access this folder. Is this the best approach? I remember an old Clipper library Netlib that I think provides this capability. Or should I look at Data Encryption programs to protect the data.

Thanks
Pete

 

[JRB-Bldr]

This topic has been discussed many times within this forum.

I might suggest that you use the Keyword Search to find previous postings and suggestions.

Note - some people confuse "encryption" with limited file access.

"Encryption" is encoding the data so that it is not intelligible if read without de-encryption. That, by itself, does not in any way, prevent someone from opening the file and modifying the contents.

File access limitation can be achieved (or not) by a variety of means depending on which version of FP/VFP and which OS you are using.
1. Using the operating system's file attribute flags (such as HIDDEN, SYSTEM, READ-ONLY)
2. Setting network permissions to only allow certain people certain access rights.
3. Modifying file names to confuse people.
4. Etc.

Good Luck,


JRB-Bldr
VisionQuest Consulting
Business Analyst & CIO Consulting Services
CIOServices@yahoo.com

 

[rgbean]

If you were encrypting the whole table, then one of the easiest and most secure is Cryptor IV by Xitech (

http://www.xitech-europe.co.uk/

), but it is a commercial product. They have a demo version to show how easy it is to implement, and in my testing, there was very little overhead introduced on all but the largest tables. I've used different versions in custom apps under both FPW and VFP.

NetLib also has Encryptionizer (

http://www.netlib.com),

but I've never used it.

One freeware solution to encryption is the CryptPak by Milan Kosina (

http://milan.jikos.cz/).

Another is CIPHER50.FLL based on work by Tom Rettig and available at the UT (

http://www.universalthread.com/

) in the Download area.

VFP 7.0 & 8.0 have a Crypto API component in the Foundation Classes that uses the MS API encryption.

Rick

 

[rohbe]

I did a keyword search on Novell/Win NT because encryption really wasn't what I was asking about - it is a last option. I really would prefer to have the application have its own login name/userid and be able to log in and let the network provide the security not encryption.

Thanks,
Pete

 

[rgbean]

To login to these, I believe you really need access to the Win32 API, which is virtually impossible in FPD and difficult to "suspect" in FPW. Unless you consider upgrading to VFP 8.0, I'd stay with the encyrption ideas.

Rick