Passwords stored in columns

• faubus

  SSC Veteran

  Points: 239

  More actions

  September 3, 2003 at 4:21 am

  #84321

  Can anyone tell me if there is a way to display passwords as a string of asterisks when viewing a table using any of the client tools? My problems is that I have a number of users who need to be able to use client tools, and I can't restrict select privelages at column level and it would be an enormous hassle to move all passwords to a seperate table.

• Steven.

  SSCrazy Eights

  Points: 9806

  More actions

  September 3, 2003 at 4:40 am

  #472337

  You could encrypt the field, which would mean changing the code that needs to read/write to that field.

  For example see http://www.activecrypt.com

  who sell encryption addins

  Steven

• guarddata

  SSCertifiable

  Points: 6583

  More actions

  September 3, 2003 at 8:25 am

  #472369

  Could you use a view?

  Table (

  Field1,

  Field2,

  OrigPwd VARCHAR(20)

  )

  CREATE VIEW v_Table AS

  SELECT Field1, Field2, '******' AS OrigPwd....

  Guarddata-

• Frank Kalis

  SSC Guru

  Points: 111183

  More actions

  September 3, 2003 at 8:56 am

  #472375

  Do you store unencrypted passwords in a db?

  Seems to be pretty challenging! Something like 'Overclocking your server'

  Now being serious.

  Your users need to have access to client tools?

  Why?

  What client tools?

  Isn't it sufficient, like Guarddata mentioned, to grant them access to views or some stored procedures.

  Cheers,

  Frank

  --
  Frank Kalis
  Microsoft SQL Server MVP
  Webmaster: http://www.insidesql.org/blogs
  My blog: http://www.insidesql.org/blogs/frankkalis/[/url]