Re: Security implementation

From: BP Margolin (bpmargo@attglobal.net)
Date: 12/13/02 

From: "BP Margolin" <bpmargo@attglobal.net>
Date: Fri, 13 Dec 2002 11:54:11 -0500

There is nothing that requires that the application password be hardcoded in
the application itself. The only requirement is that the application know
the password and use it to activate the application role.

Perhaps you could have the application password be stored in the registry or
some other place, and be read by the application at execution time.

-------------------------------------------
BP Margolin
Please reply only to the newsgroups.
When posting, inclusion of SQL (CREATE TABLE ..., INSERT ..., etc.) which
can be cut and pasted into Query Analyzer is appreciated.

"chen" <test@yahoo.com> wrote in message
news:045001c2a2c5$03514530$89f82ecf@TK2MSFTNGXA01...
> Thanks for the reply murali. Problem with the application
> role is having to hardcode the password in the
> appliaction. Ours being a multi site installations we
> cannot do that
> >-----Original Message-----
> >see application role in books online
> >>-----Original Message-----
> >>Hi guys,
> >>
> >>I need to implement a security in MS SQL 7.0/2000 where
> >in
> >>users should not be able to login thru' the Query
> >Anlayzer
> >>or any other db tool and access database. Only way they
> >>can access the DB is thru' application. I appriciate you
> >>guys if you can provide different security implemetations
> >>
> >>Thanks
> >>Chen
> >>.
> >>
> >.
> >

Quantcast