Database Roles

From: Boris Nikolaevich (boris@nikolaevich.mailshell.com)
Date: 08/15/02 

From: "Boris Nikolaevich" <boris@nikolaevich.mailshell.com>
Date: Wed, 14 Aug 2002 16:43:13 -0700

One of our clients has a SQL 2000 database hosted with his ISP. For
security reasons, the ISP only gives one login per customer--period.
However, the customer's requirements define a user who can read/write/delete
data in any table and users who can read data in any table but only write
data in certain tables.

If I only have one login, is it possible to create and use different roles
at different times for the same login? For example, let's say I have
DefaultLogin as the user name and PowerUser, BasicUser as the user-defined
roles. Is it possible to connect to the database and say, "Login as
DefaultLogin using the PowerUser role" for one user and "Login as
DefaultLogin using the BasicUser role" for other users?

The front-end currently connects using ADO. I could certainly code
restrictions into the front end regarding which tables can be written to by
which type of user, but I'd rather open as few doors as possible.

Thanks for any suggestions,
Brian Lewis

Relevant Pages

  • Re: dail-up ISP login cant do W3C encoding.
    ... > authentication software and ISP chooses to do. ... they don't use 'text login anymore; ... I mean the 'capability available to the listener to my telco line'. ...
    (comp.os.linux.networking)
  • Re: Howto connect ISP non-ppp ?
    ... >> Telephone the ISP and ask whether a normal user login is allowed. ... account on the ISP host, just a PPP account and authentication is via ... According to the rlogin man pages rlogin needs a host name specified. ...
    (comp.os.linux.networking)
  • Re: Auto Populating Blocked IPs List
    ... I just checked my security logs - which I save - and I see ... The earlies attacks were trying to almost invariably login as ... >IP blocks their ISP is handing out and allow only those. ... Bill Vermillion - bv @ wjv. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: one script for pap/chap and manual authentication
    ... >Well I used your script to deal with a ISP here (which I know ... I've seen used to set up logging in windoze. ... and ignore the text based login. ... know what to do once they sent a login/password, unless the ISP auto ...
    (comp.os.linux.networking)
  • Re: Database Roles
    ... the ISP only gives one login per customer--period. ... > DefaultLogin as the user name and PowerUser, ... > DefaultLogin using the PowerUser role" for one user and "Login as ... > DefaultLogin using the BasicUser role" for other users? ...
    (microsoft.public.sqlserver.security)