Search results

Thanks Doc, yep chose Access for RAD, yep took some basic lessons on binary expolitation in Decompilers like IDA, Binary Ninja & another I can't remember now. Was merely trying to ascertain the most secure patterns of implementation for Access. Got some great input so much appreciated.

Thanks CJ, dropping Access & rebuilding at this stage is not an option. I accept the limitations of Access & was aware from the start. & was just asking questions to what is possible to make it as hard as possible so I can choose the best option & input has been extremely helpful (thank you all)...

A user won't but a competitor will (not building a decompiler; but using one). Oh definitely, apologies I'm not a developer, just an enthusiastic donkey🫏 with a goal. Thanks Tom, yes aware - but correct me if wrong but a function's contents cannot be encrypted & hidden from a user. So that...

Thanks sonic8, surely the only interference would be currently executing services/ processes. You could go further and keep a log of all backups & covariantly delete when deleting the application so they have nothing to restore if they try to crack the app. Basic admin (backups.../ restores)...

Thanks Tom, oh so an 'Assembly' is a unit of compiled code ready to be executed & can refer to external .dll's which SSMS can execute. I'm researching them now. Sounding more secure. This addresses security concerns, but I'm failing to see how I could refer to a calc'd column from that without...

Thanks Doc, the connection parameters available in the GUI were all the same. So in the unlikely event that SSMS-22's default properties for the exact same connection differentiated then the connection was the same. Persistent Connection - MS Access is not at play yet. Opening SSMS connected to...

CJ'll know much more than me. I don't think you should be building the query in Access. You want it handled at the BE, then just pull through that query/ view (or equivalent in you BE). There is an issue with Access using a Combo Box that it pulls the record itself from the query to display in...

1 - Silly question here - could one not capture the login event of an SA, delete everything on an SA login? 2 - Disable the SA account 3 - Less effective deterrent - rename the SA account.

Thank you both, happy new year to you both, sorry I did not explain well. Thanks CJ, agreed, my calc's are more complex but this simplifies the topic & the premise of a protecting the formula of a calc'd field in a query (maybe not as I haven't explained it well it all :p). From the user/...

Thanks Doc, that is extremely interesting & I want to learn more of that kind of thing. Going to mark this as Solved; apologies with my inexperience. I think it was more of a connection with Azure with SSMS-22 being slower than SSMS-21 on the same connection. Apologies again.

Think of an Orders Table where the Total is calc'd & value is not stored. I think I'm right in saying "only a column's data can be encrypted in SSMS". So it's not possible to protect your math in calculated fields. It also seems that an encrypted Stored Procedures weak-spot is the SP needs to...

I would imagine Doc is referring to 'access' in a protocol context; not MS Access. But you're right that I'm not really hooked up to MS Access & this is relating purely between SSMS-22 & Azure. Thanks Doc, my trial with Azure has ran-out but in the interest of learning I didn't have an...

I've purchased many licenses from Google's search results (not directly from the manufacturer). I wouldn't consider the firm's 'retail price' of a firm with an annual turnover of $282 billion to be what they pretend it to be; if that was an accurate reflection of it's true value they would not...

Thanks for doing that Albert, really appreciated. Yes must've been Azure 's latency on the most basic of Resource Group package spec... As per nr-22 ditched Azure for the time being as it was too slow to develop on. Locally much faster, which was always going to be the case for obvious reason...

Thanks Tom, ah I see, of course you have ltd info to go from. Yes it would just be to encrypt my intellectual property is all, but a good point to make as I was unaware.

Thanks Tom, 'holding back user data', was unaware. It would be a username, an ID for me to ascertain they have not exceeded the permitted nr of users so don't think this would constitute 'holding back user data'. I certainly don't want to breaking any laws so thank you for making me aware.

Thanks Isaac, I did think of hosting a CSV on a server & intermittently check that the user was permitted. The challenges are not exposing other customer's data in the permitted users table online/ sharepoint, which I would think would be possible via encryption. Stored Procedures - thanks...

Thank you Isaac, was what I was hoping to hear. It is a brilliant application.

Thanks sonic8, noted & apologies for my denseness. I thought it may be possible for me to create the user/ number of users & assign their names bespoke to whom buys the product but hide the 'unrestricted administrator account, deploy the application with default settings to hide the privileged...

Ok, in order to be able to sell the application outright I think I may be better to deploy with SSMS as the back-end installed locally/ LAN. I should be able to avoid reduce privileges by installing/ deploying via a script & create a restricted principal/ type user with restricted privileges in...