Method to support authentication and authorization of web application user to database management system in web server based data-driven applications

摘要

A method for controlling access to a database management system includes permitting direct access only by a full user having a user name and password, for example. Light users must access the database management system through the full user. In an access authorization method, the web application user is authenticated to the database management system, the web application user is bound to a database management system session, an authentication request is accepted from a web user, which is forwarded to the database management system, upon successful authentication a secure database layer key for the database management system session is returned, the secure database layer key is associated with a user's web session and a data operation request is accepted from the web user; the data operation request and the secure database layer key are submitted to the database management system for execution and the results of the data operation to the web user, after which the web user is logged off and the secure database layer key invalidated.