|
Enterprise versions of Time Matters from version 3 through version 9 used a user assigned login and password. For large sites, this was assigned and controlled by a system administrator or even a DBA. This login and password was considered secure and was not generally shared with anyone without a “need to know”. Time Matters Version 10 has deviated from this legacy methodology. In an effort to simplify the migration of Professional end-users to the use of SQL Server the latest version of Time Matters restricts access to the login and password information used to create the new Time Matters database. This has caused somewhat of a ripple effect for those of us supporting and developing add-ons for Time Matters Enterprise. We at Data Equity have just completed upgrading our third party products to support this change. As a result we have put together the following information if you are facing similar tasks. You may also find it useful when providing information to your client’s IT staff. There are two ways to access Time Matters data without knowing the Time Matters database Owner login. One method would be to have the end user add another SQL Server login with access to the Time Matters database tables. This defeats the point originally intended (simplicity) and creates even greater confusion in the long run. Data Equity has decided instead to use Windows “Trusted” Authentication. This technique allows us to maintain a level of simplicity for our customers. Understanding Windows Authentication Windows Authentication connects to SQL Server through a Microsoft Windows user account. SQL Server will validate the account name and password using information in the Windows operating system. This method allows the user’s identity to be confirmed by Windows. The server does not ask for the password, and does not perform the login/identity validation. The credentials are managed and provided by the underlying operating system. This methodology provides a great deal of flexibility that can be managed from the Windows Security Individual or Group level. If the desired Windows user does not have access simply add them to the SQL Server Security section by group or Windows user. In SQL Server Express, Windows users are granted connect permission because the BUILTIN\Users group is already provided as a login. The Impact On Your SQL Scripts If you write your SQL scripts explicitly using the table owner, you are accustomed to changing the table names when the owner of the table is different from the logged in user. SELECT * FROM tm9user.contact Historically, the best way to keep your SQL scripts abstract is to implicitly use the current login as the table owner. SELECT * FROM contact Notice I don’t need to use the table owner in my query. Unfortunately, this method requires you to login as the table or object owner (the way TM V3 – V9 worked). We no longer have that option in V10. You will need to modify all SQL statements (HotDocs, Crystal Reports, etc) to use the newly “hard-coded” table owner lntmuser. SELECT * FROM lntmuser.contact
|