|
Te easiest way is to make the user database owner. That includes permission to do anything.
---
b { font-weight: normal; }
|
|
|
|
|
That's an easy solution, but lets not open a security hole too wide. 
ColinMackay.net
Scottish Developers are looking for speakers for user group sessions over the next few months. Do you want to know more?
|
|
|
|
|
You are right of course. On a distributed application the premissions should ideally be minimal, for an example only permission to execute stored procedures.
In a development environment (as I got the impression we are dealing with here) security is normally less of an issue, and granting database owner access can be an acceptable way to make it work and save permission hassles for a later stage.
---
b { font-weight: normal; }
|
|
|
|
|
Guffa wrote: In a development environment (as I got the impression we are dealing with here) security is normally less of an issue, and granting database owner access can be an acceptable way to make it work and save permission hassles for a later stage.
Ah yes... the later stage when time is tighter and the client is moaning about when they will get their application and all of a sudden it is discovered that the software is relying on some security setting being left open when really it should be shut.
I know what you mean though. It is very tempting just to open everything to make development easier (not just databases but for any secured system), but in my experience it just causes more problems later on - especially if it is in an area where I don't have much experience already and I don't know how to properly develop the app bearing in mind the security has to lock down later on. In cases where I should really know better, I always manage to forget some little thing that causes lots of problems later. 
ColinMackay.net
Scottish Developers are looking for speakers for user group sessions over the next few months. Do you want to know more?
|
|
|
|
|
Well, that's not really the stage I had in mind. The thread writer seems to be in the stage of getting a database connection to work at all, and at that stage it's difficult to be concerned with security issues.
---
b { font-weight: normal; }
|
|
|
|
|
Guffa wrote: The thread writer seems to be in the stage of getting a database connection to work at all, and at that stage it's difficult to be concerned with security issues.
I suppose you're right.
ColinMackay.net
Scottish Developers are looking for speakers for user group sessions over the next few months. Do you want to know more?
|
|
|
|
|
ytubis wrote: i gave him the login permissions, i thought that all the permissions come with that.
Login permission is just that: Permission to login. It does not grant any other rights.
You need to add the user associated with the login to the database you wish to access.
Then you need to <a href="http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tsqlref/ts_ga-gz_8odw.asp" rel="nofollow">GRANT</a>[<a href="http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tsqlref/ts_ga-gz_8odw.asp" target="_blank" rel="nofollow" title="New Window">^</a>] the user the rights to do what is needed. Normally, I just permit access to stored procedures. That way all the application can do is what is defined in the stored procedures.
ColinMackay.net
Scottish Developers are looking for speakers for user group sessions over the next few months. Do you want to know more?
|
|
|
|
|
Hi everyone,
I am trying to migrate a source code from C++ to C#. This code deals with computer graphics and image filtering. It needs to be efficient, this explain why I use some low level programmation in C#.
I need to find a way to create a generic class that represent an array of whatever (this array will mostly be used to represent pixels). This class will then allow me to access any data in a width * height grid of data.
But it gets intricate when I try to get a pointer on my generic type. Here is a sample:
class Field<anyType>
{
private int nx, ny;
private anyType[] data;
public unsafe Field(int x, int y)
{
nx = x;
ny = y;
if (nx * ny != 0)
{
data = new anyType[nx * ny];
}
}
// return the anyType value located at (i, j)
public unsafe anyType Value(int parameter)
{
i = (i < 0) ? -i : (i >= nx) ? 2 * nx - i - 1 : i;
j = (j < 0) ? -j : (j >= ny) ? 2 * ny - j - 1 : j;
fixed(<b>anyType* v = data</b>) //this does not compile, see error below
{
return (anyType) *(v + j * nx + i);
}
}
}
But the compilator does not like it, it says:
<i>Cannot take the address of, get the size of, or declare a pointer to a managed type ('anyType')</i>
about the bolded line.
So what? is it impossible to get a pointer on a managed object. I thought it was the goal of the fixed statement to give possibility to use pointer on any object.
I know that I could also simply use data[j*nx+i] but anyhow, I will need this pointer later on for other purpose.
Every good ideas is welcome 
Lawrence
|
|
|
|
|
Only works on types that has no managed references.
|
|
|
|
|
hello,
i find the visual c# has some feature that c++ does not,and i want to use the visual c# write something that can be used in my visual c++ project,does this possible?and what can i do?
maybe is the dll or com dll,but i do not know how to?
|
|
|
|
|
Hello
I was hunting for articles about Recording voice from microphone in Windows C#, I did not get a single one. I got one or two website who are selling recording components for high $$$$. Is it not really possible to record voice in C# ?
-- modified at 8:28 Sunday 26th February, 2006
|
|
|
|
|
Hi!
What's wrong with Ianier Munoz' article[^]?
Regards,
mav
--
Black holes are the places where god divided by 0...
|
|
|
|
|
I write this code , then i connect to a proxy [I can already ping on it] , and the code retieve exception [It connects to an unreachable host] How is this???
IPEndPoint ProxyEndPoint = new IPEndPoint(ProxyIP, ProxyPort);
Socket DestSocket = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);
DestSocket.Connect(ProxyEndPoint);
|
|
|
|
|
Hello,
When I run my Windows form, Some texboxes can take CTRL + C command to copy and right mouse click pops up with Edit menu (copy, paste , cut etc) and Some textboxes are not equipped with this feature by default. Can you tell me how can i make all textboxes and richtextboxes take CTRL+C command takeble and right mouse click edit menu enabled by default ?
|
|
|
|
|
What kind of textboxes is it that don't take those command?
Passwords textboxes of course does not support copying.
---
b { font-weight: normal; }
|
|
|
|
|
Hello,
Thanks for replying me.
In my windows form, I am using 5/6 regular textbox and richtextbox.(not password) I did not write code for those boxes to take CTRL + C command (like KeyDown event handler). Some boxes are by default listening and some of them are not listening those command. I had to write code for those boxes to listen CTRL+C command.
Thanks
|
|
|
|
|
The commands are built into windows, so most standard controls respond to them.
Can you see any difference between the textboxes that do respond to the commands, and those that don't?
---
b { font-weight: normal; }
|
|
|
|
|
Hi all !
I've 3 sql table :
table1(maintable):id_car[primarykey],id_service,name_car ,
table 2:id_service[primary key] , kind_service
and table3 :myid[primarykey],id_car,company
Relations :table1 - table2(many to one) ,table1-table3(one to many)
I want to select name_car,kind_service,copany for filling a dataset in a crystal report(to taking a Report)and for this , I added an Item Data Set in my project .According to the relation between tables(table1,table2,table3),
for one table(without considering the relation) I wrote :
myDataset ds=new myDataset();<br />
strConnection.Open();<br />
string strSQL = "SELECT * FROM table1";<br />
dataadapter1 = new SqlDataAdapter(strSQL,strConnection);<br />
SqlCommandBuilder scb = new SqlCommandBuilder(dataadapter1);<br />
dataadapter1.Fill(ds.table1);<br />
CrystalReport1.SetDataSource(ds.table1);<br />
crystalReportViewer1.ReportSource=CrystalReport1;
but I dont't know , how can I fill myDataset when there is 3 table ??.
Thanks for any help.
Regards !
s_mostafa_h
|
|
|
|
|
hi everybody
i have a web site which specifies profile to my users.
my web site registeration policy is for the first step sending mail to anybody who requests to signup in my web site.(just like gmail Invitation)
but recently most of my web application mails to yahoo server will be spam or bulk.
i think the yahoo server make all of my site mails to spam or bulk.
what should i do.
my site is so Famous in my country and i have more than 500 sign up request everyday.
what should i do with this problem.
Thanks
Rastegar
|
|
|
|
|
Please don't cross post.
---
b { font-weight: normal; }
|
|
|
|
|
|
what do you mean?!
please answer me more clear.
Thanks
Rastgar
|
|
|
|
|
|
Hello ...
If i have transactions for the 3 subsequent commands to execute, is database locked for this time to prevent interruption by other threads (automatically) ? Or must I use lock statement for this purpose ?
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
