Re: MS SQL Server 2000

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thanx for the reply Steve,

I have figured out a sugestion for how I could implement the database access. Maybe you or someone else can give me feedback or any suggestions of improvment.

The client will be a Windows form application.
The access (record access in the database tables) will be checked manually in stored procedures.

> Depending on your requirements on security, you also have 2 addition
> concerns:
> 2) Encryption network transmissions. You're on a WAN, so I'm
> asusming this is all internal. Do you need to encrypt the network
> traffic internally?

I am planning to use .NET remoting via IIS (+binary formatter) and ssl over the WAN, is this a good idea?
I have read that it is faster than using Web services.


> 1) Encrypting the data - what if someone got the SA password, is the
> data that sensitive?

The login to the database will be done via Windows authentication, and the user will not have administrator rights.
As I understand it, I can make this login on the same machine as the database is on, from my "remoting service", without using any login information, I just need to run the "remoting service" as the same user.

In the database I then have the application login data, to authenticate the real users. (This is stored as hashvalues)

I might also use EFS (encrypted file system) for the database, but I am not sure if it is needed.


Johan
.

Relevant Pages

  • Re: Application security question
    ... database, ... That would be fine in a *nix system and was my initial plot, but the query application may also be run from Windows boxes which may not have a logged in user, user names may not be unique or the sysadmin may not be told if they change. ... Users with a *nix login can be kept away from it by using a captive login - logging in shows a menu of programs that they can't escape from. ... no advantage from encryption, ...
    (comp.lang.java.programmer)
  • Re: PDO: Switch database user without reopening connection
    ... At the bare minimum there will be a login user who only has ... modifications to the database as well (editors get update permission, ... As database connections are expensive to ... a certain visitor in the Session, and use that value to start the right ...
    (comp.lang.php)
  • Re: nooB PhP login using MySQL
    ... The process is to take the supplied username and password and do a ... database query to see if there is a row containing that combination. ... commonly used method for login encryption? ...
    (comp.lang.php)
  • Re: PDO: Switch database user without reopening connection
    ... At the bare minimum there will be a login user who only has ... the postgres user they are logged in as to one that can make ... modifications to the database as well (editors get update permission, ... As database connections are expensive to ...
    (comp.lang.php)
  • RE: How to allow users to change their password?
    ... be set up to provide the Security dialog window for password changes. ... I'll have to login using their login ... > name/password first. ... See http://www.QBuilt.com for all your database needs. ...
    (microsoft.public.access.security)