Re: Hide files from some developers

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Nick Malik [Microsoft] (nickmalik_at_hotmail.nospam.com)
Date: 03/21/05


Date: Mon, 21 Mar 2005 12:43:09 -0800

Your boss has trust issues. Two bits of advice:

1) Have your boss consult a lawyer to make sure that legal agreements with
vendors and contractors are solid and can work in your company's favor in
the event of the exposure of a trade secret.

2) Create a build server that builds your app every day. Take a look at
NAnt or NMake to automate the build. Create a script to automatically copy
the results of the build to a share that allows specific access to the
employees who need it. Now, folks who need to refer to the code do not have
direct access to it.

Note that #2 is a partial victory at best. You create three issues: (a) a
loss of efficiency since a developer cannot see the code he or she is
calling, making it more difficult to use the code, (b) a sense among the
staff of distrust, which engenders resentment and lowers productivity, and
(c) no real protection of trade secrets since a developer who knows what
module the trade secret lives in can decompile the module. Of course, you
could run the code through an obfuscator during your nightly builds. This
buys you a little but not a lot.

3) Partition your systems so that key logic is only created and maintained
by internal, trusted, staff members, while other, less sensitive, work is
performed by consultants and vendors.

In Microsoft IT, we make use of consultants and vendors all the time. We
rely on #1, make use of #3, but rarely if ever use #2. No one wants to work
in an environment where they aren't wanted.

HTH,

-- 
--- Nick Malik [Microsoft]
    MCSD, CFPS, Certified Scrummaster
    http://blogs.msdn.com/nickmalik
Disclaimer: Opinions expressed in this forum are my own, and not 
representative of my employer.
   I do not answer questions on behalf of my employer.  I'm just a 
programmer helping programmers.
--
"Lea" <Leah@discussions.microsoft.com> wrote in message 
news:02ca01c52de8$85ae4360$a501280a@phx.gbl...
> Not only does my boss want to hide files from some
> developers, he wants to be able to hide different files
> from different users. We already use source control to
> ensure that people cannot check out code that they should
> not change. He wants some of the code to not be visible
> to some developers.
>
> The project is managed C++. All of the code is required
> to successfully build the application. I thought to make
> libraries so that code could be accessible as DLLs
> through adding a reference, but these would need to be
> source controlled and rebuilt when code changes. Also we
> would need various libraries to hide the different parts
> of the code for different people. This sounds like making
> lots of places for things to go wrong.
>
> My boss asked me "isn't there just some way you can hide
> individual source code files in .Net?" I told him not to
> my knowledge.
>
> Any ideas of how I could achieve the hiding of some files
> for some people in our .Net project would be appreciated.
>
> -- Leah 


Relevant Pages

  • Re: Help creating database
    ... After the first round, the client can walk away with what they have so far, ... help you shoot yourself and your boss in the foot or feet. ... The problem with so many amateur Excel ... For a journeyman Access developer your proposed application seems to ...
    (microsoft.public.access.gettingstarted)
  • Re: Help creating database
    ... help you shoot yourself and your boss in the foot or feet. ... The problem with so many amateur Excel ... For a journeyman Access developer your proposed application seems to ... A list of priceless Access resources I cribbed from the frequent posts ...
    (microsoft.public.access.gettingstarted)
  • Re: Youthful managers, development, and methodology....a conundrum
    ... have to jump to another live app to add an addition/change, ... Then, if you've assigned Developer A to the task, ... Then, when Boss B comes by and says, "I need Developer A to work on ... A's time to get project ABC done by date XYZ for Boss A. Having him ...
    (comp.programming)
  • Re: Linklst; 6 of 1/half dozen of the other?
    ... The guy who left was the boss, right now we have no real authority ... ATTACH programs from both vendors. ... send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO ... Search the archives at http://bama.ua.edu/archives/ibm-main.html ...
    (bit.listserv.ibm-main)
  • Re: Update db FE with "power user"
    ... Your boss also modified the original query to ... queries that are snapshots. ... And the 'developer' is just ... he doesn't lose any of his custom objects (generally forms, queries, ...
    (comp.databases.ms-access)