How do you perform control security with C# application using SQL database.

Question

0.00/5 (No votes)

See more:

I want to store and retrieve users added to sql database using c#(Winforms) . When a user logs in to the application (C#), controls will be enabled/disabled/visible/hidden based on the role that the user has been added to and, logs will be stored when the user accesses a stored procedure, view or functions. My question is: Do I need to create a database user(sql database user) for each user name (using a single login name)
when the user of the c# application add a new user or do i create a database table and add users to it (using single login name and user name to sql database and server)?

What I have tried:

i do not know which option is suitable.

Posted 13-Sep-17 8:02am

kwaku Emma

Updated 14-Sep-17 4:33am

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

OriginalGriff · Answer 1 · 2017-09-13T08:29:00

Solution 1

No, your app is the SQL User, the actual users should be stored in a table which is accessed via the single SQL User. You add and remove users (and their roles) to that table.

(If you think about it, that's the only sensible way to go, to create a user in SQL from your code, you'd need to connect to SQL - which requires a user with the right permissions.)

Posted 13-Sep-17 8:29am

OriginalGriff

Comments

kwaku Emma 13-Sep-17 15:32pm

how do I make log entries when user accesses stored procedures?

OriginalGriff 14-Sep-17 4:51am

Do you want to try explaining that, assuming that I can't see your screen, access your HDD, or read your mind? :laugh: