This is regarding general protection of a database hosted on a network. I am
developing a database application for my college library using VB.NET, that
will reside on a network.
For some reasons, I did not want to hardcode the Database location in the
application. Instead, when a user logs in, he can choose the database
location using a folder browser control, if the location has changed.
Now, I realize that for this, I have to put the database in a shared folder,
which makes it quite vulnerable. Having pondered over the problem for
sometime, a solution that comes to my mind is to place a Text file in the
same shared folder that always contains the correct path of the database.
When a user chooses that folder, I will read the actual path of the database
from the text file, and move the database to a non-shared folder.
I haven't yet implemented this approach, but felt it better to consult
someone before. So, would this approach work, and is it a good idea.
Rick Brandt - 14 Jan 2007 14:24 GMT
> This is regarding general protection of a database hosted on a
> network. I am developing a database application for my college
[quoted text clipped - 13 lines]
> I haven't yet implemented this approach, but felt it better to consult
> someone before. So, would this approach work, and is it a good idea.
I think you worded that incorrectly. Do you mean you want to store the data
file in a non-shared folder until a user does this and THEN move it to a shared
folder? If you move it to a non-shared folder then the user will not have
access to it.
If the database moves how will the user know this and where it was moved to?
If you want to provide some protection the opposite approach is normally used.
That is, the file is placed in a folder that is shared, but hidden and only the
admins know what the hidden share is. That way users have *access* to the file
via your app, but would have a hard time doing anything to the file outside your
app because they won't know where it is.

Signature
Rick Brandt, Microsoft Access MVP
Email (as appropriate) to...
RBrandt at Hunter dot com