Security module required for developed software

Asked By Fari2 20 points N/A Posted on - 06/18/2011

Hi,

I have developed a software for a company. They want to add security rights in it. Their requirements are to assign tasks to their employees separately, with separate user name and passwords.

The issue is that: an employee who is not authorized for a task, should not be able to view  that task, that particular task should be invisible for him.  Is it possible when I am working with VB.60 and SQL server?

Thanks!

• Status: Open
• Question Views: 1017
• Answer Count: 4
• Vote Up 2 Vote Down

• Answer Accepted: Yes
• Question Category: Visual basic

Best Answer by Kate_spears

Go To Solution

Best Answer

Best Answer

Answered By Kate_spears 0 points N/A #91579

Security module required for developed software

Hi Fari2,

Implementing user-rights management is simple to begin with, but quite difficult to master.

I cannot give you the actual code, but I can give you an idea of concepts that would help you write the code you need. Basically you want to keep usernames and passwords hashed in a database, then maybe add a field to indicate permissions, department they belong to etc. Just keep these in mind:
 

• Sanitize user input – do NOT use unclean user input directly in a database query (such as when checking for username / password for login). Be mindful of SQL injection and XSS attacks.

• Store sensitive information using encryption. For authentication items like passwords, it is good practice to use 1-way encryption combined with 'salting'. For example, instead of just storing an MD5 sum of the a password directly, append a long character string before getting the MD5.

I am sure other users should be able to pitch in additional information.  So just be patient and think things out before you code.

Hope this helps

About Kate_spears

Questions
0

Answers
7

Best Answers
3

• Vote Up 0 Vote Down

• Posted on - 06/19/2011
• Question Category: Visual basic

Answered By Fahar 10 points N/A #91580

Security module required for developed software

In this case, simply you need to develop a security module with working like:

Separate username and passwords for all employees.

Add the list of all forms in the database.

Develop a form with the list of all forms, with check boxes for each item in the list.

When you are making a new user for your database, specify his authorized forms and save that in the database.

And when that user logged on, firstly check the list of forms authorized for him.

Just make invisible the authorized forms, and hide others.

Make sure that this complete process is controlled by administrator or authorized user.

About Fahar

Questions
1

Answers
25

Best Answers
9

• Vote Up 0 Vote Down

• Posted on - 06/20/2011
• Question Category: Visual basic

Answered By Suny2 20 points N/A #91581

Security module required for developed software

Very informative question. Waiting for the solution.

About Suny2

Questions
1

Answers
4

Best Answers
0

• Vote Up 0 Vote Down

• Posted on - 06/20/2011
• Question Category: Visual basic

Answered By Fari2 20 points N/A #91582

Security module required for developed software

I have developed a form with the facility of adding, editing and deleting the information of employees. And another form is also there, where we can make the username and passwords for the already saved employees.

Now the issue is, how can I save the list of the forms attached in the project? I am working with the additional component for the main menu instead of a built-in menu for VB.60 projects. And in database, where can I save the list of authorized forms for a user? In the table of employee or a new table is required?

Help me in detail, waiting

About Fari2

Questions
1

Answers
1

Best Answers
0

• Vote Up 0 Vote Down

• Posted on - 06/20/2011
• Question Category: Visual basic