[AccessD] Office API's

Because people sometimes walk away from their computers and leave them unlocked. Sensitive functions of some applications require that only genuine users get to alter data, or even to view it.

Lambert 

-----Original Message-----
From: accessd-bounces at databaseadvisors.com [mailto:accessd-bounces at databaseadvisors.com] On Behalf Of Gustav Brock
Sent: Tuesday, December 14, 2010 3:05 AM
To: accessd at databaseadvisors.com
Subject: Re: [AccessD] Office API's

But Lambert:

> One API that took me so long to find was one that would provide 
> Windows Authentication. In other words require the user to enter the 
> name and password that was used to start the current Windows session: 
> to prove that they are who fOsUsername says they are.

why would you need to do this? The user has authenticated himself/herself when logging successfully in to the current Windows session.

/gustav


> -----Original Message-----
> From: accessd-bounces at databaseadvisors.com
> [mailto:accessd-bounces at databaseadvisors.com] On Behalf Of Heenan, 
> Lambert
> Sent: Monday, December 13, 2010 11:34 AM
> To: Access Developers discussion and problem solving
> Subject: Re: [AccessD] Office API's
>
> One API that took me so long to find was one that would provide 
> Windows Authentication. In other words require the user to enter the 
> name and password that was used to start the current Windows session: 
> to prove that they are who fOsUsername says they are.
>
> Private Declare Function LogonUser Lib "Advapi32" Alias "LogonUserA" (ByVal _
>    lpszUserName As String, ByVal lpszDomain As String, _
>    ByVal lpszPassword As String, ByVal dwLogonType As Long, _
>    ByVal dwLogonProvider As Long, phToken As Long) As Long
>
> Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As _
>    Long
> Const LOGON32_PROVIDER_DEFAULT = 0&
> Const LOGON32_LOGON_NETWORK = 3&
>
> ' Check whether a username/password pair is correct '
> ' if DOMAIN is omitted, it uses the local account database ' and then 
> asks trusted domains to search their account databases ' until it 
> finds the account or the search is exhausted ' use DOMAIN="." to 
> search only the local account database '
> '  IMPORTANT: works only under Windows NT and 2000 and XP
>
> Private Function CheckWindowsUser(ByVal UserName As String, _
>    ByVal Password As String, Optional ByVal Domain As String) As Boolean
>    Dim hToken As Long, ret As Long
>
> ' The handle hToken is not used by CheckWindowsUser ' but is required 
> by the API LogonUser
>
>    ' provide a default for the Domain name
>    If Len(Domain) = 0 Then Domain = vbNullString
>    ' check the username/password pair
>    ' using LOGON32_LOGON_NETWORK delivers the best performance
>    ret = LogonUser(UserName, Domain, Password, LOGON32_LOGON_NETWORK, _
>        LOGON32_PROVIDER_DEFAULT, hToken)
>
>    ' a non-zero value means success
>    If ret Then
>        CheckWindowsUser = True
>        CloseHandle hToken
>    End If
>
> End Function
>
> Lambert


--
AccessD mailing list
AccessD at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/accessd
Website: http://www.databaseadvisors.com