Release 10.1A: OpenEdge Application Server:
Developing AppServer Applications

Overview of the AppServer security options

Table 4–2 summarizes the various application-specific security options available.

Table 4–2: AppServer security considerations

Security consideration	Design strategy
User authentication and authorization	Use the AppServer Connect procedure to validate a user.
Database access	Limit or prevent client application access to a database.
AppServer session access	Limit users’ access to specific procedures through the EXPORT( ) method.
Audit trails	Use the AppServer Connect and AppServer Disconnect procedures to assist in management of audit trails.
Run-time compilation	Protect any executable code that you deploy in source form.
Operating system	Protect the files that you deploy for an AppServer.
Secure Sockets Layer (SSL)	Provide data privacy over connections to the AppServer and authentication between clients and servers on those connections.

The remaining sections on security provide additional information about each of these considerations.

For information about developing these features, see Chapter 2, " Programming the AppServer." Also, for more information about standard Progress 4GL security features, see OpenEdge Development: Programming Interfaces .