sql connection security

From: karthik (karthik_at_maximizelearning.com)
Date: 04/30/03 

Date: Wed, 30 Apr 2003 10:27:25 +0530

Hi,

I have a windows application that has a list of users and their passwords.
All this information is stored in a SQL 2000 database. My application at
present connects to SQL server via a fixed user name and password say
test/test.

This results in me hardcoding the value somewhere in the code. What i
thought i could do is, create similar SQL users as the one that is there in
the database. Like lets say i have a user called "abc" with password "abc"
in my user database, i will create a similar sql user.

That way my connection to the application will not have hardcoded user names
and passwords.

But what i need to make sure now is that a user should not get access to sql
server directly... i mean just by connecting from one enterprise manager to
my server's enterprise manager. How can i do this ?

In short, what i need is that i have to make sure that users in SQL server
should not be able to connect directly to SQL. They should only connect via
my windows application. How can i achieve this ?

And if someone can throw more light into the way i authenticate users it
would be of great help!

Thanks a ton!

Regards,
Karthik.

Relevant Pages

  • File Ownership failing for Domain Accounts
    ... I am having a consistent problem on several instances of SQL 2005 setting ... the ownership of database files to a windows user. ... Right-click on any user database, ...
    (microsoft.public.sqlserver.security)
  • Re: SQL web application fails at login. Need help.
    ... >to open a connection to the database, ... >SQL authentication). ... >>from console and windows applications. ... >>and windows applications can run the SQL tables. ...
    (microsoft.public.sqlserver.programming)
  • Re: Ecrypting a database
    ... Windows comes with a native file/folder encryption, ... account would need access to the database to unencrypt the ... >> I have a SQL database which will only be accessed only ...
    (microsoft.public.sqlserver.security)
  • Re: Sql Server Login
    ... firstly I was under the impression SQL authenticaiton will be better ... But now I know windows authentication is recommended. ... Now my application is ready and talking to this database in MSDE. ...
    (microsoft.public.sqlserver.msde)
  • Announcement - GMP SQL Query 2005
    ... inc. has released a lightweight SQL ... Query tool that works with any database or flat file that can be accessed ... via UDL and a data provider. ... Windows 2000 Server ...
    (microsoft.public.sqlserver.tools)