At 4/10/2001 09:19 AM (Tuesday), Marc Leclerc wrote:

>Is accessing the security database Evil or is something often used.

It is not evil. Many of us have done it to accomplish just the type of
thing you want to do.

I have added indexes and access rights to the security database to
accomplish what I need and have had no trouble with them. I have also added
triggers which allow SYSDBA to do more than the average user and to allow
average users to change their passwords but not those of others.

The passwords in the security database are encrypted using a standard Unix
technique which you will have to duplicate in your client code if you want
to allow users to change their passwords. Either that or use the new
services API which (I think) provides this capability. If it does, then I
recommend using it. (I just don't know because I have personally done very
little work with version 6.) Anyway, the code has been published in C and
Delphi versions if you decide to roll your own solution.