| Reply To Message: |
| Posted By |
n/a on 1/1/2001 |
| Subject: |
Authorization issues |
| Message: |
Well, the solution to your problem isn't as simple as flipping a few switches in Enterprise Manager. You need to deny access to all tables and create custom views and stored procedures that restrict data to certain fields and/or rows. For example, when populating a list of projects, you will need to write a stored proc that fetches the data for all rows where the creator of that row is the current user.
Once you have programmaticaly covered all of your data access rules you should consider distributing it as an MDE so that the design tools cannot be used to view your modules. Also - don't use attached tables or give users direct access to ANY SQL Server tables.
|
|