Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
SQL User ID and Password In Application
Message
General information
Forum:
Microsoft SQL Server
Category:
Security
Title:
SQL User ID and Password In Application
Environment versions
SQL Server:
SQL Server 2005
Application:
Desktop
Miscellaneous
Thread ID:
01493702
Message ID:
01493702
Views:
170
I am wondering if anyone has any suggestions...

We have a Visual Foxpro 9 Client / Server application that is run on a thousand desktops that connects to a SQL 2005 server.
We also have C#.Net Apps too that this scenarion falls under as well...

We embed the SQL Server, Database Name, User ID and Password into the application so that the user that runs the application can access the SQL Server database.

The LAN ID from the Windows workstation is used to query a table in the applicationj to see if the user has access to the application, if that LAN ID does not exist in the table it does not allow the application to run.

We are being told now that I cannot know the User ID and Password and can no longer embed it into the compiled EXE file.
Only 2 people know the SQL Server ID and Password we are using. This now has to be 1 person, the DBA.

Any suggestions on how I might go about doing this?

I do not think we can go with Windows authentication because that would allow people using Word, Excel, Access authentication to the database via Windows authentication and change the data outside of our application. Plus windows authentication would be a administrative nightmare with adding people and people leaving the group etc...

Outside of me giving the DBA my source code, showing him where to change the SQL Server user ID and password and having him compile it himself... Does anyone have any ideas??

Thanks!
Bob
Next
Reply
Map
View

Click here to load this message in the networking platform