Hi Guys,
   The Users in my Apps login using the info from a Users table in the database.
   Two key fields - UserID & UsrPwd.  How original.  The table is encrypted.
   I'd like to add the requirement for a user opening EDBMger to have to log in via their relevant record in the Users
Table with the usual  - 'Get it wrong and the App closes'.
   Perhaps not possible but I would like to do this with minimum change to any of the EDBMgr code if possible.  Primarily
to make it easier to port if EDBMgr gets an update.
   Any thoughts/suggestions on how this may be achieved are appreciated.
Regards & TIA,
Ian

Ian


My first response is "don't do this, don't go there" EDBManager is far to powerful to allow users access. Not only did I not allow access I generally didn't even tell them DBSys or EDBManager existed

OK rant out of the way.

I also have a users file. With the switch to ElevateDB I altered its name to Staff to not confuse myself -  my application creates a user entry in ElevateDB to accompany the entry in the staff file.  I thought it would be good that way because then ElevateDB managed the passwords. If any of them found out about EDBManager they would 1) have to create a session, 2) set up the database link and 3) login using what they knew which would give them limited access.

I feel you'd need to hack EDBManager quite a bit to make it secure from hacking.

Obvious question - why do you want to give them access?


Roy Lambert

Roy Lambert wrote:

> Obvious question - why do you want to give them access?

Hi Roy,
   Some of my Customer's staff are less than diligent in their data entry and whilst I have most things locked down
occaisionaly something gets through.
   Rather than having to contact me, I have given their Ops Manager, a cluey guy, access to EDBMgr so he can fix things
in the short term while I add more 'protection'.
   Whilst all my Apps have a login and recording to a Users Log, I woud like to add the functionality to EDBMgr.     This
would allow me to relate any EDB System Events to a Log in date time, as well as an added layer of protection if
anybody accidentally or otherwise findes EDBMgr.

Regards,
Ian

On 9/10/2018 12:22 PM, Ian Branch wrote:
>    Rather than having to contact me, I have given their Ops Manager, a cluey guy, access to EDBMgr so he can fix things
> in the short term while I add more 'protection'.
>    Whilst all my Apps have a login and recording to a Users Log, I woud like to add the functionality to EDBMgr.     

Not sure of the scope of changes he would be making but sounds like
basic table browsing/updating and maybe simple SQL execution.

I'd consider writing a simple utility to accomplish this as long term it
might be easier to support. You could use your user login and audit trail.

EDBManager is great but gives one access to everything and mighe be
extra maintenance headache IMHO just to setup session and connectivity etc.

Raul

+1

Roy Lambert