Re: Active Directory, IIS, and Application Roles...

From: Uri Dimant (urid_at_iscar.co.il)
Date: 12/14/04

  • Next message: German: "Tracing addlogin event"
    Date: Tue, 14 Dec 2004 09:46:55 +0200
    
    

    rich
    Can you specify in CONNECTION string of the application to which database to
    connect?

    Application Roles is very useful when the certain user for example has not
    an access to the table (update/insert ) but he needs to update/insert new
    Orders so by using AppRole you may allow him to get the access to the
    table.
    You will have to activate the Role immediatly after connection string.

    "rich" <rich@discussions.microsoft.com> wrote in message
    news:EAB3367F-81F7-4D38-85F5-6938284864F0@microsoft.com...
    > I am creating an ASP.NET application that runs on a server with Windows
    2003,
    > Active Directory, SQL Server 2000 (SP3), and IIS. Traditionally I have
    used
    > trusted connections and database roles for application access to SQL
    Server.
    > However, my MS Access users now inherently have access to all the stored
    > procedures that my application uses (including deletes). Not good. I
    have
    > never used SQL Server Application Roles and wonder if that's the direction
    to
    > head. Or is there a better way? What I really need is a way to tell SQL
    > Server that only certain application(s) (maybe by name) have access to a
    > particular database.
    >
    > 1) If I use Application Roles can SQL still capture the trusted accounts
    > used for SQL Logins? Any other auditing still possible?
    >
    > 2) Any issues to consider using Application Roles with IIS apps?
    >
    > Thank you for any insights!


  • Next message: German: "Tracing addlogin event"

    Relevant Pages

    • RE: Backups have Shadow Copy Problems
      ... and restarted the server. ... suggested and changed the recovery model to simple on the one database called ... I understand the issue to be: the backup task failed ... You back up data from a volume that contains a Microsoft SQL Server ...
      (microsoft.public.windows.server.sbs)
    • Re: upsizing to sql 2005
      ... the word SERVER in it, ... You can access to the database by multiple means (Access, ... and how does it update the SQL database with the new records in Access? ... Query Name: Arcadia - ARC ...
      (microsoft.public.access.queries)
    • Re: DBIx::DBH - Perl extension for simplifying database connectio ns
      ... Only one of the Informix notations has a host name in it, ... that's technically not a host name but a server name - the distinction ... under the illusion that people who use Perl to access a database know ... The connection string is system-specific -- end of sob story. ...
      (perl.dbi.users)
    • Re: Linked Tables in Access
      ... any use of SQL Passthru, Linked Tables or any other use of MDB / MDE ... server, or would I also need to convert *those* queries to passthrough ... I've been trying to understand why Access database files become corrupt. ...
      (microsoft.public.access.adp.sqlserver)
    • Re: Leveling by ID vs. "Standard"
      ... of this trade called Project Management. ... a database for the "Project Tables," ... to write reports on data from the server database. ... product supporting queries created with SQL. ...
      (microsoft.public.project)