Secure access to database application

[Peter Ashford]

Hi All

Just looking for a bit of advice. I have an muti-user application
that I'm developing that talks to an Oracle database. What's the best
way (or at least a good way!) of securing user + password access to
the program? I've currently got a user table in the database and I
fetch whether the login credentials match what's in that table - but I
log in as an admin user to the DB in order to fetch the user table, so
admin password is coded into the application - this is obviously
bad.

Ideas? I presume there's a standard way of doing these kinds of
things )

 

[=?ISO-8859-1?Q?Arne_Vajh=F8j?=]

Just looking for a bit of advice. I have an muti-user application
that I'm developing that talks to an Oracle database. What's the best
way (or at least a good way!) of securing user + password access to
the program? I've currently got a user table in the database and I
fetch whether the login credentials match what's in that table - but I
log in as an admin user to the DB in order to fetch the user table, so
admin password is coded into the application - this is obviously
bad.

Ideas? I presume there's a standard way of doing these kinds of
things )

The best solution would be if each user got real database
usernames/passwords and simply connected with those.

The next best solution is probably if the initial connection
to check the access used a username/password that only gave
access to run some check & lookup code that are only available
for running not for viewing.

Arne

 

[Wibble]

I have a jsf page which collects some input
for a database query. I want to submit
this request and have the server render a
csv file, which explorer will display.

I'm using Netbeans visual web to draw the request page
and ListObjectDataProvider to wrap the data.

I'm able to invoke a page which renders the data
as an html table, but how do I get it to display
a CSV file? (or plain text or binary)

 

[stefanomnn]

HI!
you could make so, in your action method:

1)look up HttpSerlverResponsObject,
2)set contentType to text/plain
3)write cv data and close stream
4)invoke responseComplete() on FacesContext object (terminate jsf
lifecycle)

i hope i helped you!
Stefano