readme.txt

SQL Security with Visual Basic 6.0

This dll logs into the a SQL server, using admin Logon and PW and fills out a class data model based on all the non-system defined rolls associated to the provided database, and all the users assigned to each roll. 

This way you can see if the user has rights to a certain action before actually running the query or stored procedure. You could wrap large functions with this check instead of going through half the function's code before you get to the actual SQL call, just to find out that the user does not have rights to that query or table.  For example, say you had an app that had two modes.  Read and Read / Write.  The app 2 forms for displaying ready only data and 4 forms for editing data, each form accessed through a button on a tool bar.  with integrated SQL server security, the app wouldn't know that the user didn' have privs to edit the data on those 4 forms until the app tried to run a query against the SQL server. with this dll, you can load all rolls and users of those rolls for a database when the app starts.  then check what roll rights that user has and enable or disable the buttons on the toolbar as necessary.  this way the user never even has the choice to try and edit the data because they can't access the forms.

Another benifit of doing this is that with integrated security, the app assumes that the person logged onto the PC is the person running the app.  To tighten that security model, have the user log onto the app when it first starts and after all rolls and users are loaded into the data model check to see if that user is even listed.  If not the app can give a warning that the user has no privs to the app and close itself.

One draw back to this dll is that it only works, as is, if you associate NT Users to SQL Server rolls.  If you assigned NT Groups, you would need to use ADSI in order to pull out all users of that group and add the groups users to the roll

This dll uses SQLDMO in order to pull rolls and users from a database.

Also included is the UML class model that i used to design my classes.  this can be viewed with Microsoft Visual Modeler