Design question

[JJ]

Hi,

If I have a Winform thick client that had internet access and I had
an access database residing on a web server located some where else on
the net. I guess I would probably use a web service to access the
database. So I guess I would supply the url to the web service/web
method with appropriate parameters passed in. Is this the approach you
guys would take with the layout described above or is there another
way, better way to handle this?

Thanks,

J

 

[Karl Seguin]

Yes, something like that sounds right.

You can connect the winform client directly to the database, but then you
lose out on all the benefits of having a busisness layer.

Karl

 

[Peter Rilling]

Just keep in mind security. You want to make sure that only your app can
make calls to the webservice.

 

[JJ]

Well its not directly. It is going through a web service that can house
the business logic and make calls to a DAL that would issue database
updates,inserts etc.

J

 

[JJ]

Ok how can I make sure that happens? By setting a password parameter on
webmethod called?

J

 

[S. Justin Gengo]

JJ,

If you're in control of the web services server then you could set the
server to use Windows Integrated security. That's what I do. Then I give my
code that is calling the web service a windows credential with the username
and password for a domain account that has permissions to run the web
service. If you'd like details on using this method to lock down a web
service just let me know.

--
Sincerely,

S. Justin Gengo, MCP
Web Developer / Programmer

www.aboutfortunate.com

"Out of chaos comes order."
Nietzsche

 

[JJ]

Issue is I don't have control. The web service will be on a hosted
website that I have an account on. Meaning I don't have access to the
box to change security to basic authentication for web service.

~J

 

[S. Justin Gengo]

JJ,

Then you're kind of stuck. A password parameter will give a little bit more
security to the service. So you may as well do that, but of course any good
packet scrapter could eventually pick up the password. Still it's better
than nothing.

--
Sincerely,

S. Justin Gengo, MCP
Web Developer / Programmer

www.aboutfortunate.com

"Out of chaos comes order."
Nietzsche