Security Question (Please?)

A

Andy

Hi, Hopefully someone has thought about this one before...

If we are using Windows Authentication to access project server, what
is to stop people creating a DSN and accessing other peoples data in
say, Excel?

We are looking into ways of tightening things so that we can make the
system more secure. Has anyone gone the route of creating a wrapper
for Project Server Authentication instead, so that users do not know
their password?

I'm all ears. Many thanks in advance.
Andy
 
B

Brian K - Project MVP

Andy said:
Hi, Hopefully someone has thought about this one before...

If we are using Windows Authentication to access project server, what
is to stop people creating a DSN and accessing other peoples data in
say, Excel?

We are looking into ways of tightening things so that we can make the
system more secure. Has anyone gone the route of creating a wrapper
for Project Server Authentication instead, so that users do not know
their password?

I'm all ears. Many thanks in advance.
Andy
Click to expand...

This is not possible because project server does not use the windows
auth information for each user to access the database. Project server
'knows' which projects a given user can use and it then uses a 'secret'
set of credentials to access the data in the database.

So in order to create a DSN to get to this data you would need to know
the password for the MSProjectUser sql account OR have a sql account on
the server that has access to the project server database.

--
___
Brian K
Project MVP
http://www.projectified.com

Project Server Consultant
http://www.quantumpm.com
 
Top