Re: DB Owner Role to App users

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 10/22/04 

Date: Fri, 22 Oct 2004 15:57:46 -0600

Sorry but I can't tell you as I don't know what your application does
or how the security is setup, what you need the users to do. That's
going to end up being something you asses based on business needs and
the application itself. Setting up security correctly is not
necessarily a quick and easy thing to do - it takes some thought as
well as understanding of the application. I don't think you can
correct the issue by just changing a few things. You'll need to look
at the application, what SQL statements are being executed by what
users, etc.

-Sue

On Fri, 22 Oct 2004 11:09:02 -0700, "Dave"
<Dave@discussions.microsoft.com> wrote:

>What permissions we can give to App Users from Database ?
>
>What is the easiest way to do that ?
>
>"Sue Hoegemeier" wrote:
>
>> No it certainly isn't necessary and typically not a good idea. DB
>> Owner can do pretty much whatever they want in the database. You would
>> want application users to have the minimum needed to use the
>> application which typically wouldn't require having all permissions in
>> a database.
>> If it's required by the application itself based upon how that is set
>> up or configured with the security, that's a different issue and more
>> related to the application design and security setup. But in general,
>> not required.
>>
>> -Sue
>>
>> On Thu, 21 Oct 2004 08:07:03 -0700, "Dave"
>> <Dave@discussions.microsoft.com> wrote:
>>
>> >In my environment I have found many App users ( groups ) with DB Owner
>> >Database role.
>> >
>> >Is this required ?
>> >
>>
>>

Relevant Pages

  • [NEWS] Lawson Financials RDBMS Insecurity
    ... Beyond Security would like to welcome Tiscali World Online ... the database itself) to easily compromise the Lawson Financials' database. ... Setup #1 tends to be the preferred configuration method by Lawson ...
    (Securiteam)
  • RE: A question about a basic security setup...
    ... A question about a basic security setup... ... > I was thinking of running iptables on the dual homed host, ... What you are looking for here, is an "application proxy" type firewall. ...
    (Security-Basics)
  • Re: Network setup problems
    ... >for developmentally disabled and advises us on our network setup), ... administrative complexity, security, and functionality. ... The ongoing task of synchronising userids and passwords, ... both with Advanced File Sharing (Simple File Sharing ...
    (microsoft.public.windowsxp.network_web)
  • Re: permissions to import after a new workgroup file?
    ... To import as a new owner from a previous owner, ... for the objects in the original database. ... Normally permissions are assigned via Groups. ... You shouldn't be altering security measures with the "default workgroup". ...
    (microsoft.public.access.security)
  • Re: security not going across the network
    ... > database that is running across a network. ... > PC, the one the database security was setup on, it works ... it just opens as it normally did. ...
    (microsoft.public.access.security)
Loading