Consultor Eletrônico

Status: Verified

GOAL:

How does the Progress / OpenEdge SQL92 server authenticate users?

GOAL:

How does SQL92 authenticate users?

FACT(s) (Environment):

All Supported Operating Systems
Progress 9.x
OpenEdge 10.x
OpenEdge Category: SQL

FIX:

The Progress SQL92 engine uses the following rules to authenticate users when connecting or attempting to perform actions against the database.

1) If no user records exist in the _user table of the database then any attempted connection will check the operating system userid system to see if a user exists which matches the user name supplied for connection.

If a userid exists at the operating system level then the password supplied for the connection attempt is tested against the password for the userid.

If the password matches then the user is allowed to connect to the database.
Any rights granted to that user within the SQL92 security for that database will be honored.

If no userid exists at the operating system level or the password provided does not match the userid password then the connection may be allowed but no rights are granted to the user to see data within the user defined tables.

2) If any records exist in _user table of the database then the user name supplied for the connection attempt is searched for within the _user table.

If the user name supplied for the connection attempt matches a user name within the _user table then the password supplied is tested against the password for the user in the _user table.

If the password matches then the user is allowed to connect to the database.
Any rights granted to that user within the SQL92 security for that database will be honored.

If no user name matches within the _user table or the password provided does not match the _user record password then the connection may be allowed but no rights are granted to the user to see data within the user defined tables.