Hi kelly,

With TS/CITRIX, a common practise is that only the application starts up, not having the the taskbar, not having the possibility to start anything else, run under a certain account.
Also, such users run under a certain profile with very limited permissions in case applications are started from within the VFP application.

Walter,




>> I agree with your statement. One a sidenote, writing webservices and running VFP applications on TS/CITRIX does not require the system
>> administrator to take additional steps to protect the data in which the security issues are handled on a total different level.
>>
>>Walter
>
>For the TS/Citrix solution, the admin would still have to lock Windows down very tightly on the controlled/remote machine to the point where pretty much nothing else can be run on it (and certainly not installed on it) though, right? I say that because, again, once the user is running the application, they would have access to the DBF files, no matter what login they are using. So if they can then run any other program, even Windows Explorer, they could grab a copy of the data, possibly delete it, etc. The lock down is possible, of course, but certainly wouldn't qualify as "does not require the system administrator to take additional steps to protect the data," FWIW.
>
>Again, I'm not saying that this is a concern in 100% of environments. I do think it's a concern in more places than just my office, however. The web service method has some merit, true, as does running a (VFP) COM server on a separate box and making data requests/updates only through it. But there again, those things can be done without any VFP whatsoever too and, many would argue, can be done better/more easily outside of VFP. I have no real problem with someone who wants to work with VFP only and come up with creative solutions to these issues. I've been there myself. I do like to see, however, that the people with whom I work look at other possible solutions for these situations. Sometimes, whether a VFP expert or not, there are easier ways to do these things with tools other than VFP.
>
>Kelly