Re: Is UserLevel Security Really Necessary?

@Larry [snip]
On the other hand, the server DBs have better security. MS SQL Server
is, IMNSHO, about the easiest to learn and administer, but has an
initial cost plus a license is required for each user. There are
open-source databases, e.g., MySQL and PostgreSQL, which do not have
the initial or per-user charge, but for which you may need to contract
"services" for helping you solve problems, etc., and they are not as
easy to learn and administer.
[/snip]

Please note that you can get Microsoft SQL Server 2005 Express Edition
as a free download from Microsoft. SQL Server Management Studio Express
Edition is also free. Using SQL Server as the data store is not
difficult, and definitely much more secure. You could, for instance,
create a stored procedure in MSSQL to append a new log entry and give
the security site user access to that ONLY.

Nic





*** Sent via Developersdex http://www.developersdex.com ***
.

Relevant Pages

  • Re: SQL or Access DB
    ... As far as encryption goes though... ... with Sql Server you can use SQL DMO and encrypt your stored procedures ... installation - Security was absolutely critical and in most instances, ... > then we create a nice gui around this database and sell it to automotive ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Is there any way to prevent hacker trying to guess sa password?
    ... and port 1433 will not be open. ... If someone can crash SQL Server by connecting to port 1433, ... You don't need multiple security experts. ...
    (microsoft.public.sqlserver.security)
  • Re: Getting to the bottom of MSDE network connection problems ...
    ... Brilliant, Nick, especially the explanation for local network user being ... authenticated as GUEST in WinXP SP2. ... > on a desktop OS like XP (meaning that, you can not compare SQL Server ... > again and selected the security tab. ...
    (microsoft.public.sqlserver.msde)
  • RE: Login failed for user (null).
    ... used at signon to authenticate in SQL Server. ... connect the remote SQL Server database), is there any other data accessing ... What's the security identity used to access the remote SQL Server, ... the worker process identity. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • [NT] SQL Extended Procedure Functions Contain Unchecked Buffers
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... SQL Server 7.0 and 2000 provide extended stored procedures, ... Several of the Microsoft-provided extended stored procedures have been ... Exploiting the flaw could enable an attacker to either cause the SQL ...
    (Securiteam)