home bbs files messages ]

Forums before death by AOL, social media and spammers... "We can't have nice things"

   comp.databases.ms-sqlserver      Notorious Rube Goldberg contraption      19,505 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 18,592 of 19,505   
   Erland Sommarskog to enkaradag@gmail.com   
   Re: any advice for a login system?   
   19 Apr 12 22:52:22   
   
   8f51e0de   
   From: esquel@sommarskog.se   
      
   Ender Karada? (enkaradag@gmail.com) writes:   
   > i created a "dbo.user_login(username, password)" function. and created   
   > two users "admin" and "loginguest" in sqlserver. "admin" user can see   
   > and do all jobs in sqlserver. but "loginguest" cannot see tables,   
   > views, procedures etc. "loginguest" can just call "dbo.user_login"   
   > function (even cannot redesign the   
   > function) if username and password information provided is accepted by   
   > the function (matching a user in the "appusers" table) it returns   
   > admin user password and some user information to the caller.   
   >   
   > shortly, application will open a session with loginguest, get password   
   > for admin, close session and the real user will login into sqlserver   
   > with admin user.   
      
   Is this a two-tier or three-tier application? That is, is there a middle-   
   tier running on a separate server, or are users connecting directly   
   from their workstations?   
      
      
   --   
   Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se   
      
   Links for SQL Server Books Online:   
   SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx   
   SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca