i am in the beginning stages of architecting a new N-Tier application.  i am 
using JBoss and MySQL 5.  it is a government application so auditing and 
security are a nightmare.

The way i have designed all my systems in the past has been the database has a 
user table and i build in my own user securty systems.  im afraid with the data 
that this system is going to include, that probably isn't going to be enough.  
there are going to be so many tables and so many fields that i would rather use 
MySQL's security system to decide what data a person can see and write the 
systems to manage that.  

that leads me to my problem.  in the past i have always had a single database 
user account that the entire application uses.  that user and pass was stored 
in a configuration file somewhere in the app and all is well.  but that won't 
work here.  the client portion of the application will be using EJB's to get to 
the business logic and ultimatly the data in the database, how/can i set up my 
entity beans that will be doing the actual read and writes to the database to 
not use a common configured user/pass, but use the user/pass combination that 
the user enters in the login screen.

thanks


View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3932699#3932699

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3932699


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
JBoss-user mailing list
JBoss-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to