Release 10.1A: OpenEdge Getting Started:
Core Business Services

AppServer program security

OpenEdge supports the following features for securing an application running on the AppServer:

Authenticating users to the AppServer at connect time.
Authorizing user or client access to AppServer session procedures using access control lists implemented using the EXPORT( ) method on the SESSION system handle.
Using an AppServer API to intelligently filter access to database resources for clients (instead of simply “passing through” client access to database tables and fields).
Generating AppServer activity audit trails.
Using run-time compilation and other dynamic resources to dynamically configure and run AppServer procedures according to application security constraints. This feature can also make use of encrypted source code to secure the source for run-time compilation (see the "Secure source code" section). You might also want to implement secure AppServer application services using the completely dynamic application environment provided by Progress Dynamics (see the "Progress Dynamics security features" section).

For more information on AppServer program security, see OpenEdge Application Server: Developing AppServer Applications .