Re: Database security

[Douglas J. Steele]

Assuming you're talking about Access, neither solution is particular good.
To get proper security, you need to implement Access Security, as described
at http://support.microsoft.com/support...ent/secfaq.asp (For
Access 97, the database password is next to useless: see
http://www.trigeminal.com/lang/1033/...asp?ItemID=5#5 for more details)

--

Doug Steele, Microsoft Access MVP
Beer, Wine and Database Programming. What could be better?
Visit "Doug Steele's Beer and Programming Emporium"
http://I.Am/DougSteele/


"Chris Jantze" <tech@addison.attbbs.com> wrote:
>
>Which is a better solution: setting up a custom permissions file and shipping
>it out with your app, or setting a password on the databases?
>
>We currently have the permissions file set up, but are restructuring all
>of the databases so it's a great time to implement any changes. Thanks
in
>advance.

[Oren]

>Assuming you're talking about Access, neither solution is particular good.
>To get proper security, you need to implement Access Security, as described


Anyone have a clue as to why microsoft has not set the db password to a
simple md5 hash?!?! At least that way ppl can't grab your password, they
can
wipe it out, do whatever the **** they want in the db, and put it back, but
at least they don't know what the actual password is.......

Oren

[snake-eyes]

If you'll be using Access, you can try messing up with the nt authentication
to make it somehow the same with SQL to some degree at least ... I always
use customized security, there are millions of ways to secure your data in
your own way ... just be creative enough ... cheers!



"Chris Jantze" <tech@addison.attbbs.com> wrote:
>
>Which is a better solution: setting up a custom permissions file and shipping
>it out with your app, or setting a password on the databases?
>
>We currently have the permissions file set up, but are restructuring all
>of the databases so it's a great time to implement any changes. Thanks
in
>advance.

[Michael Howard]

let's start from the top - what threats are you trying to defend against?
what data are you storing? what is the value of the data? in which environment
is it going to run?

once we have these data in we can determine solutions.

mh


"Chris Jantze" <tech@addison.attbbs.com> wrote:
>
>Which is a better solution: setting up a custom permissions file and shipping
>it out with your app, or setting a password on the databases?
>
>We currently have the permissions file set up, but are restructuring all
>of the databases so it's a great time to implement any changes. Thanks
in
>advance.