Re: Prevent direct connections

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 03/25/04 

Date: Thu, 25 Mar 2004 14:42:02 -0700

One option would be to use application roles with the
application instead of Windows authentication. You can find
more information on application roles in books online.
Other then that, you can't really block the access if the
logins need access through their Windows accounts. Some have
implemented checks for users that will kill the process
after the fact if they aren't logged in with whatever
application. But that's an after the fact and not blocking
access really.

-Sue

On Thu, 25 Mar 2004 13:29:07 -0800, "Kasey"
<kasey1233-msforum@yahoo.com> wrote:

>
>We have an application which connects to a SQL 2000
>database using the user's NT login. Access to tables is
>controlled by the application. The application also
>determins which commands (SELECT, UPDATE, DELETE) they can
>execute.
>
>Can I block access that doesn't occur through our
>application? Can I block access by host or program (as
>seen in master.dbo.sysprocesses)?
>
>I can't block access to tables by login, as that would
>prevent the application from working.
>
>Any suggestions?
>
>Thanks!!
>

Relevant Pages

  • Re: Credentials not being passed with remote access
    ... allowed windows authentication to work, ... I had assumed johnx was a domain user rather than a local Windows account. ... johnx was set up as a local login on sql server. ...
    (microsoft.public.sqlserver.security)
  • Re: ASP 2.0, C#, LDAP Login, and Forms impersonation?
    ... Or, I could just start over with a windows authentication login, and after ... FormsAuthenticationTicket fat = fi.Ticket; ... I do not set any dwFlags. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Best approach for authenticating users for various departments in ASP.Net
    ... well you could use windows authentication to do user authentication. ... they get to the login page.) ... a string ... > where the first "0" meant they didn't have permission to department 1, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: asp.net windows authentication
    ... if the browser requests a resource and get a 401, the browser asks a new login. ... you could write a handler that checked for the 401 and if the user had sent a valid login, redirect to an access denied page instead of responding with a 401. ... when a user trys to access a page that they do not have access to, they are given the annoying windows authentication popup, which is useless because they are denied in the web.config file. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Suggestions on site-blocking, on a per-login basis?
    ... login for when we have people staying with us.>> I'm using the hosts file ... to block access to web sites that my kids> waste too much of their time on ...
    (microsoft.public.windowsxp.general)