Re: How many users for a database application?

From: Hari Prasad (hari_prasad_k_at_hotmail.com)
Date: 08/23/04

  • Next message: Hari Prasad: "Re: How to Setup Linked Server" 
    Date: Mon, 23 Aug 2004 08:44:13 +0530

    Hi,

    I recommend you to have seperate users in SQL server for each application
    (provide prev. based on requirement), this will allow you to
    have more security.

    If you have the option of using Windows Authentication to connect to sql
    server then you can set
    the user and password policies for each user, this enables the highest
    security level.

    Note:

    I will not recommend you to have application level users because of security
    reasons.

    Thanks
    Hari
    MCDBA

    "Kazar Kunos" <kazar@inbox.lv> wrote in message
    news:e$92kfHiEHA.704@TK2MSFTNGP09.phx.gbl...
    > Hi,
    >
    > lately i've been faced with a dilemma of whether i should choose to have
    one
    > database user to access the database from my app and have inbuilt user
    > management in the app itself or if i should choose to make a database user
    > for every user of the application, implementing minimal user management on
    > the app.
    >
    > Which is best to choose? what is the best practice?
    >
    > reagrds,
    >
    >
    >

  • Next message: Hari Prasad: "Re: How to Setup Linked Server"

    Relevant Pages

    • Re: Impersonation with VB.net 2.0 and SQL 2000 help needed
      ... What type of you app is, ... In either case, if the DBA only allows Windows Security on the SQL Server, ...
      (microsoft.public.dotnet.framework.adonet)
    • Re: Deploying & Security
      ... See the SQL Server 2000 Security Whitepaper--the security model is ... >accessed from within my app. ... Do I have to assume a certain user login in order to accomplish any of ...
      (microsoft.public.sqlserver.security)
    • Re: Using database roles for security
      ... Books Online will give you some basic information on using security, ... Here's some resources on SQL ... You don't say whether your app is a windows app or a web app--either ... >SQL Server database roles can aid database security. ...
      (microsoft.public.sqlserver.security)
    • DTS Package Fails to find import file
      ... the DTS package from my development machine, run the package, and everything ... When I install the app on another machine, it successfully kicks off the DTS ... rather than widows security on the login to the SQL Server. ...
      (microsoft.public.sqlserver.dts)
    • Re: Is there any way to prevent hacker trying to guess sa password?
      ... and port 1433 will not be open. ... If someone can crash SQL Server by connecting to port 1433, ... You don't need multiple security experts. ...
      (microsoft.public.sqlserver.security)