QUESTION POSED ON: 17 May 2002
> We are a financial institution with branches all
over country. We have a
client-server based application which was initially
designed to be
implemented in individual branches. Later, with the
changing needs of the
business, we decided to have a centralized datacenter
and all the branches
were to connect to one location through the 'net, with the
application and the
database located at this centralized
location.
In order to make the application accessible to all
the different branches we
deployed the application on Citrix server. In the
application, we have a
specific role that needs to be granted to the
applicaton user; with the
grant of this role certain pop-up buttons get enabled
in the application.
When the application was being used in individual
branches, it was fine -- a single user had this role and the role
could not create any
security hazards, but now different users from
different branches
connecting to the same application and having the
same role is a hazard, as
people from one branch have priviledges on the data
of another branch.
Can we have a way where in we can still restrict
users with same role from
accessing certain obejcts??
|
