> -----Original Message-----
> From: Robertson-Ravo, Neil (RX) 
> [mailto:[EMAIL PROTECTED] 
> Sent: 18 June 2003 14:46
> To: '[EMAIL PROTECTED]'
> Subject: RE: [ cf-dev ] OT - SQL Server
> 
> 
> I am not sure you can actually limit viewing of data on a 
> record by record basis... You could add security columns on 
> each table etc...this is doozie of problem though

Surely you could create views on the data and allow access that way... Then
you can give permissions to view those Views! Apart from that, you are
talking about database roles as well...

ie Internal User, Internal Admin, External Viewer

And then add users to these roles and allow the users to login. Then change
the permissions for the roles.

Either that, or just create users and change permissions.

Depends on what you want exactly.

Paul

> Hi all,
> 
> Is this possible or even the right way of doing it? If so how?
> 
> I want to have an SQL database that can be seen both 
> internally to our corporate network and externally on the 
> web. The data consists of loads of tables where some of the 
> data is for internal viewing only. This data isn't 
> coneniently placed in seperate tables (another inherited 
> database) and the sensitive data might be in several records 
> across several tables.....
> 
> So the idea is to create two accounts for the database one 
> which will allow people to view sensitive data the other not. 
> I thought that if I can tell the users IP address (or part of 
> it) via coldfusion then I can log the person on as a 
> particular user. Those with internal addresses get to see it 
> all those without dont.
> 
> Actually I have just been told that some of the data is only 
> available to the privaled few in house as well. So there is a 
> kind of teired account structure here...
> 
> Does this make any sense at all?
> 
> Regards - Paul



-- 
** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For human help, e-mail: [EMAIL PROTECTED]

Reply via email to