dbTalk Databases Forums  

Authentication over different databases

comp.databases.theory comp.databases.theory


Discuss Authentication over different databases in the comp.databases.theory forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Nikolai Onken
 
Posts: n/a

Default Authentication over different databases - 09-09-2007 , 07:14 PM






Hey,

I have to design following system and am quite stuck on what the best
way would be to solve the problem:

There are several of the same databases for different clients (they
have to be different because they are hosted on different machines).
Currently authentication is done with every client database.

Some clients (they decide) will have access to a centralized library
and can generate and/or read content.

I now wonder how I can make sure that only person A from company ABC
can edit/delete content in the Library while person B from company DEE
can only read the content. Since person A and B are from different
companies/databases they might have the same user IDs and their login
information (email, password) might change over time (so some sort of
hash for identification would not work).

So how can I make sure that the centralized database will know that it
deals always with the same user?
One way would be to store a unique has in the library and update the
hash once the user changes his/her information but is this the best
approach?

I hope my problem is clear.
I'd be really happy if anyone has some ideas on how I can approach
this design question.
Regards,

Nikolai


Reply With Quote
  #2  
Old   
Ed Prochak
 
Posts: n/a

Default Re: Authentication over different databases - 09-11-2007 , 12:38 PM






On Sep 9, 8:14 pm, Nikolai Onken <nikolai.on... (AT) gmail (DOT) com> wrote:
Quote:
Hey,

I have to design following system and am quite stuck on what the best
way would be to solve the problem:

There are several of the same databases for different clients (they
have to be different because they are hosted on different machines).
Currently authentication is done with every client database.

Some clients (they decide) will have access to a centralized library
and can generate and/or read content.

I now wonder how I can make sure that only person A from company ABC
can edit/delete content in the Library while person B from company DEE
can only read the content. Since person A and B are from different
companies/databases they might have the same user IDs and their login
information (email, password) might change over time (so some sort of
hash for identification would not work).

So how can I make sure that the centralized database will know that it
deals always with the same user?
One way would be to store a unique has in the library and update the
hash once the user changes his/her information but is this the best
approach?

I hope my problem is clear.
I'd be really happy if anyone has some ideas on how I can approach
this design question.
Regards,

Nikolai
given the lack of response, I'd say you did not clearly define your
problem.

Ed



Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.