Newbie - Help with Security

From: David Bye <david_bye_at_pacific.net.sg>
Date: Wed, 13 Jan 1999 23:55:28 +0800
Message-ID: <369CC1F0.4EABFC2A@pacific.net.sg>

We are developing a Java application using JDBC to ORACLE. The client is WinNT.

We need to secure the database so the user cannot use an ODBC connection to connect to the database. (i.e. The only way to access the information is through the application).

The current situation requires the user to provide logon details (userid and password) for the connection. This exposes the above possibility.

The security department are against having a hardcoded connection (ie. program supplies hardcoded userid and password.)

Is there a standard technique used in this environment to provide the above ? Anywhere I can read up on this ?

Is there a mechanism to tie the WinNT logon to the Oracle connection ? Without buying single signon products ?

Thanks

David Bye Received on Wed Jan 13 1999 - 09:55:28 CST