I was wondering about what most of you do for prompting users to login to your applications, if at all.

Do you/your clients generally require this or are your applications usually only distributed to the users who are supposed to have access?

Do you interface with the network login and use that to authenticate or do you create a user table for the app itself?

When using a back-end DB like Oracle, SQLServer, do you have the app connect in with a dba account and just handle rights and roles within your app?


Most of the stuff I've done only required basic security, like rights to screens, running particular reports, tracking who modifed each record, etc. So I've written everything into the app itself. The only issue was being able to see passwords, but I have a basic work around for that. Since most have been desktop apps, they've pretty much stuck to VFP databases and the users needed to get into the tables "behind-the-scenes" anyway.

I ask this because now I'm planning on creating a client/server version of one of my apps and would like to know how the experts handle this.


Thanks for any comments, ideas, past experiences your willing to share on this.

- Brian