Secure access to database application

Thread view:

Peter Ashford - 11 Jun 2007 01:54 GMT

Hi All

Just looking for a bit of advice. I have an muti-user application
that I'm developing that talks to an Oracle database. What's the best
way (or at least a good way!) of securing user + password access to
the program? I've currently got a user table in the database and I
fetch whether the login credentials match what's in that table - but I
log in as an admin user to the DB in order to fetch the user table, so
admin password is coded into the application - this is obviously
bad.

Ideas? I presume there's a standard way of doing these kinds of
things :o)

Reply to this Message

Arne Vajhøj - 11 Jun 2007 03:02 GMT

> Just looking for a bit of advice. I have an muti-user application
> that I'm developing that talks to an Oracle database. What's the best
[quoted text clipped - 7 lines]
> Ideas? I presume there's a standard way of doing these kinds of
> things :o)

The best solution would be if each user got real database
usernames/passwords and simply connected with those.

The next best solution is probably if the initial connection
to check the access used a username/password that only gave
access to run some check & lookup code that are only available
for running not for viewing.

Arne

Reply to this Message

Wibble - 11 Jun 2007 03:45 GMT

I have a jsf page which collects some input
for a database query. I want to submit
this request and have the server render a
csv file, which explorer will display.

I'm using Netbeans visual web to draw the request page
and ListObjectDataProvider to wrap the data.

I'm able to invoke a page which renders the data
as an html table, but how do I get it to display
a CSV file? (or plain text or binary)

Reply to this Message

stefanomnn - 11 Jun 2007 15:08 GMT

HI!
you could make so, in your action method:

1)look up HttpSerlverResponsObject,
2)set contentType to text/plain
3)write cv data and close stream
4)invoke responseComplete() on FacesContext object (terminate jsf
lifecycle)

i hope i helped you!
Stefano

> I have a jsf page which collects some input
> for a database query. I want to submit
[quoted text clipped - 7 lines]
> as an html table, but how do I get it to display
> a CSV file? (or plain text or binary)

Reply to this Message

Secure access to database application

Free Magazines