none
secure row filtering RRS feed

  • Question

  • Hello!

    SyncFx Security Considerations   states "Do not rely on filtering for security".

    I need to implement some business logic for DB-app,  where some sensitive data should be synchronized only by their owner.

    Data are synchronized between SQL Server and SQL Server Compact databases using Collaboration Scenarios (it works good for non-sensitive data) by means SqlSyncProvider and SqlCeSyncProvider. Now 2-tier architecture is used and N-tier architecture (WCF-based) will be used in future.

    1. Is it possible to identify clients in Collaboration Scenarios  with SqlCeSyncProvider (it hasn't ClientId Property )?
    2. What is best practice in secure row filtering in SyncFx?

     

    Thanks in advance,

    Anthony

    Friday, June 25, 2010 3:02 PM