I am trying to design a VB Security/Password Framework for the app I am
developing.  Anybody got any ideas, sources of info i.e books, articles,
experiences?  I am willing to develop a security object jointly with anyone
who is willing to contribute and I will share the results with them.  My
objective is to build an object that will handle security policy enforcement
for access to databases from VB apps.

I would like to have the following functionality:
1.  Logon with password and username.
2.  Different levels of accessibility based on Create, Update, Retrieve and
Delete.
3.  Different levels of accessibility based on database tables and/or rows.
4.  Encrypted passwords.
5.  Based on User-Group-Policy just like the NT Security model where you
assign rights to groups and users to these groups.
6.  User rights and policies should be easily managed via a GUI.

Other implementation considerations are:
1.  Efficient storage of policies.  Possibly, initial logon queries DB and
downloads permissions to local storage for subsequent session policy
enforcement.
2.  Based on classes for ease of maintanence and reuseability.

I would prefer email responses.  Thanks!

--
Francis Lau
Cofano Venture System

2047 152nd Ave. NE
Redmond, WA 98052
USA
Tel: 425.644.2430
Fax: 425.643.8196