SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On



Hand-Rolled Security Vs using SQL Server Security Expand / Collapse
Author
Message
Posted Sunday, November 15, 2009 9:53 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Saturday, February 20, 2010 6:09 AM
Points: 9, Visits: 21
Hi.I wanna develop an accounting , Payrol System. in my old system, i Create one table for users and all objects in db are in this table. by value of this fields i control the access of users in application.
but in some application , some users,roles defined in Database and users that define from application mapped to this users.
1) how to do this work.
2) hand-rolled security is better than SQL Server Security?
thanks.
Post #819184
Posted Monday, November 16, 2009 7:00 AM


SSCrazy Eights

SSCrazy EightsSSCrazy EightsSSCrazy EightsSSCrazy EightsSSCrazy EightsSSCrazy EightsSSCrazy EightsSSCrazy EightsSSCrazy EightsSSCrazy Eights

Group: General Forum Members
Last Login: Yesterday @ 6:26 PM
Points: 8,183, Visits: 7,962
I'll answer question 2. In my opinion, you should try to avoid having to handle security within your application. If you do not have situations where the data determines who can use other data then you should not roll your own security. Letting Windows/SQL Server handle it is much simpler and, IMO, less likely to have problems.



Jack Corbett

Applications Developer

Don't let the good be the enemy of the best. -- Paul Fleming

Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question
How to Post Performance Problems
Crosstabs and Pivots or How to turn rows into columns Part 1
Crosstabs and Pivots or How to turn rows into columns Part 2
Post #819357
Posted Monday, November 16, 2009 8:41 AM


SSCrazy

SSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazy

Group: General Forum Members
Last Login: Yesterday @ 4:56 PM
Points: 2,405, Visits: 1,864
I would tend to agree with Jack.

If you can leverage SQL security it will make it a little easier..

CEWII


--------------------------------
Having trouble figuring out what jobs are running in SQL Server at the same time.
Try Sql Job History Visualization
It lets you view your SQL Job history on an Outlook style calendar..
Post #819420
« Prev Topic | Next Topic »


Permissions Expand / Collapse