VisionCore ICE Architecture

Previous Print

VisionCore Security

The VisionCore system establishes security by limiting access to data in the company database to users having the required permissions. In a programmatic sense, users are processes and threads that seek access to VisionCore company databases.

VisionCore Security

VisionCore requires 2 types of permission, the SQL Server authentication and VisionCore Database authentication. The SQL Server authentication is used for VisionCore database connectivity and the VisionCore database authentication is used for VisionCore data transactions.

SQL Server Authentication

VisionCore relies on the Windows NT authentication or SQL Server User authentication system for database connectivity. Processes and threads may change their user identification by using standard Windows NT authentication logon protocols. (Processes typically log on as a different user to elevate permissions to perform a task.)

User permissions granted in the Windows NT system (such as Administrator or User) do not apply to the VisionCore system.  The VisionCore system implements its own set of user roles that are enforced in the VisionCore system as appropriate.

Note:

VisionCore does not provide support for impersonation, so for web-based or other server applications, developers must implement impersonation on the server as needed before using the VisionCore API to access the VisionCore database.

VisionCore User Roles

VisionCore user roles exist in the VisionCore security system to logically control what users can access and modify. The primary roles are:

The VisionCore security system enforces the capability to perform certain tasks according to the user's permissions.

Notes

You can view the settings for each role by opening the VisionCore application and creating a new user. In the course of creating the new user, capabilities of users is customizable in the VisionCore security form shown in fig 1.

Database Security Access Levels

VisionCore primarily supports view-level security access. Table-level, column-level, and row-level security are not supported. TBD TBD TBD

Additional Roles and ISV Security Systems

The VisionCore business rules/logic layer does not provide support for creating or adding more roles to the VisionCore security system. Developers may implement their own security system in their code as needed.

Page url: http://www.comtechsolutions.com/csdemos/ice_sample/index.html?visioncore_security.htm