c# - Create a proxy between the client and a DB to minimize the risk -
i creating simple desktop application allows multiple users work on database in special gui (details not important). however, there security risk user might misuse credentials (connection string etc. in program) if extracted, connect , e.g. delete data in tables allowed access. want address risk think should use proxy? client communicate proxy , proxy performing allowed queries. think difficult implement server - client solution that, data transfer proxy client. or there other solution address issue?
your way of thinking create server proxy fine, creating server standalone application pain. if must handle serialization/deserialization send data between client , proxy. may insterested in wcf datacontracts, , when map database on server side orm can comminicate between client , wcf using class representing data. , can make authentication between client , wcf. in way client separated database , implementation of solution isn't painful.
Comments
Post a Comment