| View previous topic :: View next topic |
| Author |
Message |
Mark Rissmann Guest
|
Posted: Thu Aug 05, 2004 5:32 pm Post subject: SQL Server Admin question |
|
|
I am not a SQL Server administrator. We are adding support for MS SQL to our
application. Our clients may already have MS SQL installed on their
computers. How do I setup the privileges to not allow them to muck with our
database on their server?
-Markus
|
|
| Back to top |
|
 |
Arthur Hoornweg Guest
|
Posted: Mon Aug 09, 2004 7:56 am Post subject: Re: SQL Server Admin question |
|
|
Mark Rissmann wrote:
| Quote: | I am not a SQL Server administrator. We are adding support for MS SQL to our
application. Our clients may already have MS SQL installed on their
computers. How do I setup the privileges to not allow them to muck with our
database on their server?
-Markus
|
Setup an "application role" so the data can only be accessed
through *your* application and not with third-party tools.
See "sp_setapprole" in the MSSQL help files.
In short, this "application role" is a special combination
of username/password which one needs *in addition* to
the normal credentials in order to get access.
The user logs into the database using your application,
subsequently your application sends the secret username/password
to the database and gets access to the tables.
--
Arthur Hoornweg
(please remove the ".net" from my e-mail address)
|
|
| Back to top |
|
 |
Mark_R Guest
|
Posted: Tue Aug 10, 2004 1:24 pm Post subject: Re: SQL Server Admin question |
|
|
Thanks very much for the reply!
-Markus
"Arthur Hoornweg" <arthur.hoornweg (AT) wanadoo (DOT) nl.net> wrote
| Quote: | Mark Rissmann wrote:
I am not a SQL Server administrator. We are adding support for MS SQL to
our
application. Our clients may already have MS SQL installed on their
computers. How do I setup the privileges to not allow them to muck with
our
database on their server?
-Markus
Setup an "application role" so the data can only be accessed
through *your* application and not with third-party tools.
See "sp_setapprole" in the MSSQL help files.
In short, this "application role" is a special combination
of username/password which one needs *in addition* to
the normal credentials in order to get access.
The user logs into the database using your application,
subsequently your application sends the secret username/password
to the database and gets access to the tables.
--
Arthur Hoornweg
(please remove the ".net" from my e-mail address)
|
|
|
| Back to top |
|
 |
|