Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
User LogIn & Passwords.
Message
From
05/06/1998 08:54:59
 
 
To
04/06/1998 17:20:50
General information
Forum:
Visual FoxPro
Category:
Client/server
Miscellaneous
Thread ID:
00104822
Message ID:
00105095
Views:
50
>>>I'm using VFP5.0 and running an NT4.0 network with mostly '95 clients. On initial launch I have a screen which has a TextBox for User LogIn and another for User PassWord (neither is currently useful there just there) and several CommandButtons which launch various input forms.
>>>
>>>What I would like to be able to do is to have a user enter their login name and password that is on the server(i.e. needed for access to server resources) before allowing access to the forms that are launched by the CommandButtons. I understand using Enable/Disable for the CommandButtons, but how do I have the login/password evaluated by the server's login/password system?
>>>
>>>TIA
>>>
>>>--lincoln
>>
>>You probably mix two separate things: network security and application >security. When you run exe, it always loaded on workstation even being >installed on server, so all forms are already here.
>
>Is this true even if you use a launch program where the user's .EXE is a launch.exe with one command : DO "\\server\datadir.file.exe"? Doesn't NT allow for security down to the file level? Isn't there a way to tap into this.
>
>
>>However, you could and should build an app security system. Basically it >consists of a table with 'UserId','Password','SecurityLevel' fields. When a >users enters his/her password and userid, these entries will be evaluated >against table/record values and if appropriate record found, the SecurityLevel >value will be evaluated to provide different app flow for different users, e.g. >by disabling/enabling buttons, menu options, etc.
>
>Under NT some of the user passwords expire every 30 days and new ones are created by the user. With the above approach the system administrator would have to change the password protocol to permanent passwords and maintain a file of them or establish a separate list of "database" passwords and add or delete them along with user login names as users are added or deleted from the system. Have I got this right?
>
>--lincoln

Well, again I would repeat that it's not necessary to mix network and application security.
Edward Pikman
Independent Consultant
Previous
Next
Reply
Map
View

Click here to load this message in the networking platform