I have a situation where I only want to allow users access to Oracle and SQL Server through our VFP application. The application accesses all data with SQL pass through. I was curious how others handle this?

One approach would be to use stored procedures. This won’t allow the flexibility required.

My idea was to have the application logon to the server and grant rights to the user before logging them on then revoking rights when the application shuts down. The application user name and password would need to be stored in code?

Any ideas would be appreciated.

WRD