Re: Does using a CMS to manage security to an applet make sense?

From:

=?ISO-8859-1?Q?Arne_Vajh=F8j?= <arne@vajhoej.dk>

Newsgroups:

comp.lang.java.programmer

Date:

Thu, 15 May 2008 22:40:56 -0400

Message-ID:

<482cf42b$0$90265$14726298@news.sunsite.dk>

jmDesktop wrote:

I want a website that is a CMS, has usernames, password. The "normal"
security system stuff. I know there are a multitude, just assume that
people create accounts and the credentials are stored in a MySQL
database.

I also have an applet that will reside on one of the pages. That
applet will require a username and password. Can the applet use JDBC
to query the same database and get the credential information and make
the decision to continue or fail? Is it possible to pass the
credentials used by the CMS to the Applet so I don't have a double
logon?

The main reason I ask is because I didn't want to build an admin
interface to manage user when so many web options are out there. I
didn't want to reinvent the wheel. I don't want a double logon
procedure either though.

If you can live with that:
- direct access to the database from the outside
- people can decompile your applet and read the database
username and password
- people can decompile the applet, remove the security checks,
rebuild it and run the modified version
then: yes.

Else: no.

I would go for:

applet----(HTTP)----web app----(JDBC)----database

Arne