Re: Locking out MS Access Users...

From: Adam Machanic (amachanic_at_hotmail._removetoemail_.com)
Date: 02/24/05

  • Next message: rich: "Re: Locking out MS Access Users..." 
    Date: Thu, 24 Feb 2005 11:25:47 -0500

    "rich" <rich@discussions.microsoft.com> wrote in message
    news:14E83BBA-95CC-4221-8634-9B1821BAF19D@microsoft.com...
    >
    > specifically and solely for the web application? I know using SQL Server
    > application roles (especially for web applications) is BAD!

        Why are application roles bad? 

    -- 
Adam Machanic
SQL Server MVP
http://www.sqljunkies.com/weblog/amachanic
--
  • Next message: rich: "Re: Locking out MS Access Users..."

    Relevant Pages

    • Re: Error : "SELECT permission denied on object"
      ... The SQL Server Express installation does not grant access to the ASP.NET ... worker process identity (ASPNET on Windows 2000 and Windows XP; ... filesystem Web applications will run under the Visual ... Web applications cause permission denied errors at runtime. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Database for .NET Windows, PPC, and elsewhere?
      ... > with web applications. ... Replication is necessary. ... > I could go the SQL Server way, and it would certainly work, but it has ... with ADOCE on the PPC. ...
      (microsoft.public.dotnet.general)
    • Re: SQL Server 2005 - getting Bruteforced
      ... The SQL Server is running on an Internet Server with ASP.NET v2 remotely. ... We are testing several Web Applications there with a Remote Team. ... The ASP.NET Applications are using SQL Authentication instead of Windows ... Here's an example ADO.NET connection string using integrated security. ...
      (microsoft.public.sqlserver.security)
    • Re: SQL Server 2005 - getting Bruteforced
      ... We are testing several Web Applications there with a Remote Team. ... The ASP.NET Applications are using SQL Authentication instead of Windows Authentication. ... Also you can move SQL Server off of port 1433, and change your connection strings accordingly. ...
      (microsoft.public.sqlserver.security)
    • User account for web applications (to avoid sql-injection)
      ... I have been using 'sa' for my web applications but after reading articles ... about sql-injection I want to change the account immediately. ... deletesat the same time avoid a SQL attack like DROP Table or ... I am using sql server 2000 and I have about 12 databases (approximately ...
      (microsoft.public.sqlserver.security)