In my applications, I just have some special forms for User
administration.
There, the Sysadmin can create new users using the IBX Service
Components (for the rest I use IBO). A similar form is available for all
users without admin rights where they can change only their users
password.

The forms contains roughly 20 lines of code each and are easy to build.
Its _my_ preferred way of working but your mileage may vary...

CU,

Nick Josipovic

BIT Institute
Prof. Dr. Franz Steffens
University of Mannheim
T: ++49 621 181 1621
M: ++49 179 133 44 16
S: ++49 621 181 1622
F: ++49 621 181 1618

nick.josipovic@...

> -----Original Message-----
> From: Riho-Rene Ellermaa [mailto:r.ellermaa@...]
> Sent: Tuesday, February 05, 2002 11:56 AM
> To: ib-support@yahoogroups.com
> Subject: RE: [ib-support] User Management
>
> Does your app support user management or do you assume that SYSADM
> creates users independently?
> If user wants to change his password - how can he do it?
>
> Riho-Rene Ellermaa
> senior programmer
> Hansabank
>
> > -----Original Message-----
> > From: Martijn Tonies [mailto:martijn@...]
> > Sent: Tuesday, February 05, 2002 12:50 PM
> > To: 'ib-support@yahoogroups.com'
> > Subject: RE: [ib-support] User Management
> >
> >
> > Hi,
> >
> > > I'm planning to secure my app a little and thought about
> > starting with
> > > user management.
> > > Currently my app connects with predefined username and
> > > password that is
> > > in crypted form stored into app. The users names and
> > passwords are in
> > > USERS table. Now I thought to change it - SYSADM will create new
> > > Interbase users, who will connect to database by entering
> > > their name and
> > > password (my app gives them specified ROLE). Are there any
> > pitfalls in
> > > this approach?
> >
> > We use the same approach - IB names and an application role
> > assigned to the
> > users.
> >
> > What we are planning to change now, is to automatically add a
> > pre- and/or
> > postfix to the username and/or password so when they would
> > download a copy
> > of IBConsole, they still don't have a valid username/password
> > combo to enter
> > the database and destroy it :)
> >
> > Martijn Tonies
> > InterBase Workbench - the developer tool for InterBase and Firebird
> > http://www.interbaseworkbench.com
> >