User Profile

[eljedi]

Hi,

i'm just wandering if there is an easy way to implement user profile on vb6. I use an sql server 2000 and my question is: wich way you use when need to implemente user profiles?

Create a table on the bd for users and then store in records user right for the app? or use sql server users?


thanks for all.

[Hack]

We do it through code and userlevel flags.

We have a user table in our SQL Server and each person in the user table is assigned a userlevel. Based on that user level they can perform, or are restricted from performing, certain features within the application.

It is very easy to upgrade or down grade a user level. We do that straight through Enterprise Manager and none of our code needs to be changed at all.

[eljedi]

When you said user table in our sql server, you mean the user table the server uses to autentificate user, or some other created by you?

thanls for your answear.

[Hack]

When you said user table in our sql server, you mean the user table the server uses to autentificate user, or some other created by you?

thanls for your answear.

This was a table created by us. We create a user table for each of our applications as the security required for each application as well as the user population is different.

By creating our own table and our own set of userlevels we can taylor the security needs to meet the application needs.

[eljedi]

Thanks for your answear,

one more question: what about of the security of this table?

thanks.

[Hack]

Thanks for your answear,

one more question: what about of the security of this table?

thanks.

The security of all tables is performed by SQL Server itself.

Typically we have a completely separate frontend application that allows people designed at application admins to perform tasks that typical users can not.

For example, they can add users, delete users, change permissions, etc, but they can only do it through the admin app we write for them.

Without Enterprise Manager on their PC's (and none of them have Enterprise Manager), they can't get at the tables except through the code we write.

[eljedi]

so this table has the same rights for the user used by app than the others, isn't it?

Thanks.

[Hack]

so this table has the same rights for the user used by app than the others, isn't it?

Thanks.

I don't understand your question.

[eljedi]

sorry.

Well, the app uses a user to connect with the server. this user connects to some database where he has some rights, the table created to store the app users is suposed to hace the same rights for this user than othe tables, that's right?

Meanwhile, the app uses allways the same user to exec queries but our code is who locks or no the info access.

Thanks