>>>>>Are you using Windows Authentication or SQL Server Authentication?
>>>>
>>>>Using SQL Server authentication because user's will access SQL Server over the internet.
>>>
>>>And they're somehow authenticating with your system, or are anonymous users permitted to change data? What development platform are you using?
>>
>>Application is a fat client. Still working on the particulars but I'm intending on authentication through SSL to the SQL server on a public IP/domain name... no anonymous access allowed. Obviously if SQL Server doesn't natively handle record level "ownership" then it won't be hard for a tech-savy person to authenticate to the SQL server outside of my application and delete records manually.
>
>Hmmm... I am unaware of anything native to SQL Server, especially if you are using SQL Server Authentication. I will be watching this thread because I would also like to know the answer.
AFAIK, record level security is only available with Microsoft Dynamics NAV with Microsoft SQL Server.
See how-to:
http://msdn.microsoft.com/en-us/library/dd301065.aspx
.·*´¨)
.·`TCH
(..·*
010000110101001101101000011000010111001001110000010011110111001001000010011101010111001101110100
"When the debate is lost, slander becomes the tool of the loser." - Socrates
Vita contingit, Vive cum eo. (Life Happens, Live With it.)
"Life is not measured by the number of breaths we take, but by the moments that take our breath away." -- author unknown
"De omnibus dubitandum"