Re : Database security

From: vijay (vijay_at_ebay.com)
Date: 06/20/03 

Date: Thu, 19 Jun 2003 15:10:06 -0700

I am using SQL Server NT Authentication in an application.
I have two NT groups 'GroupAdmin' and 'GroupUser' (these
names can change and I don't want to hard code them in
application). Both these groups access same database but
with slightly different grants. I have two applications -
Administration and User applications using the same
database and NT authentication.

a) How can I prevent a 'GroupUser' from accessing the
Administration application. Basically, I need to know
based on NT Authentication to which group the user belongs
and what grants the group has on different database
objects to validate.
b) Only one adminstrator can access 'Administration'
application at a time and reject others.
I am using 'sp_who' to screen who is accessing the
database but I need to know who is in 'GroupAdmin'

Relevant Pages

  • ASP.NET Forms Authentication Best Practices
    ... ASP.NET Forms Authentication Best Practices ... What happens if your user database is compromised? ... Listing One, where you want to use login.aspx to log users in. ... string FirstName ...
    (microsoft.public.dotnet.framework.aspnet)
  • User authentication over the web (was: Secure Password in database)
    ... Subject: User authentication over the web (was: Secure Password in database) ... a web server is usually authenticated to users by using SSL or TLS ...
    (SecProg)
  • Re: Using SSPI with Custom Authentication
    ... It boils down to moving the security perimeter away from the server. ... first database contains all of the user information; ... perform authentication, and users need to be authenticated before accessing ...
    (microsoft.public.dotnet.security)
  • Re: SQL Express MDF file moved from 1 computer to another - auth f
    ... I try to attach the database which is located in MyDocuments\Visual ... Microsoft SQL Server Management Studio ... now it tells me that authentication has failed for my windows ...
    (microsoft.public.sqlserver.connect)
  • Re: Security question ..
    ... What I want to prevent is any access to the database accept through our ... application unless you have elevated permissions. ... Authentication, if he is smart enough to create an NT Auth ODBC connection ... passes through to the database or to use SQL Server authentication. ...
    (microsoft.public.sqlserver.server)
Loading