🚀 go-pugleaf

Hi

I hope someone can help me with security issues in a multi-tier app:

Server
------
TTable's
TDatabase
    Login prompt = true
    Params = NULL

Client
------
TClientDataSet's
TSocketConnection

Setting the connection = true causes the application server to prompt
for a password (locally)!  Since the client never sees the app server,
and indeed, no one manages instances of the remote data module, who
supplies the password?

As the documentation says, security would be breached by including the
password in the app server.  It also says that one may want to use
different security available in MTS, but this is not a transactional
data module.  Furthermore, the socket connection is not authenticated.

The IAppServer interface appears to have no members to change login
details unless it must be manually extended.  Since my application uses
role based security, I must also supply the role in the connection as
well.  For this reason, the application needs to know who the users are,
and they must be valid users on the RDBMS.

Any guidelines would be greatly appreciated.

TIA
Rookie