Re: DB access for web apps

From: Dejan Sarka (dejan_please_reply_to_newsgroups.sarka_at_avtenta.si)
Date: 03/22/05 

Date: Tue, 22 Mar 2005 08:05:28 +0100

For stored procedures in your database, you will have to give an explicit
EXECUTE permission to this user. I you are talking about system procedures
to get some info, like sp_help, then the user will be able to execute them
without an explicit permission. 

-- 
Dejan Sarka, SQL Server MVP
Associate Mentor
www.SolidQualityLearning.com
"Rafal W." <RafalW@discussions.microsoft.com> wrote in message
news:F1EDD860-343A-421A-A303-2FBB25687147@microsoft.com...
> thanks for response, will this allow execute sp_ ?
>
> "Dejan Sarka" wrote:
>
> > For a qick improvement, membership in the
> > db_datareader (can select all data from any user table in the database)
and
> > db_datawriter (can modify any data in any user table in the database)
> > roles should be enough. Then you can study grainer permissions needed.
> >
> > -- 
> > Dejan Sarka, SQL Server MVP
> > Associate Mentor
> > www.SolidQualityLearning.com
> >
> >
> > "Rafal W." <RafalW@discussions.microsoft.com> wrote in message
> > news:5045D447-656F-46C8-A48E-29078FFAA294@microsoft.com...
> > > I have custom .net web based application running on IIS 6 which has
> > SQL2000
> > > running in background, access to this application is based on UIDs and
> > > password from "users" table in SQL, my question is regarding
web.config
> > > file... this file has user name and password that allow web
application
> > talk
> > > to SQL db, what sql role should this account have in order to .net
> > > application work corectly? db owner will do but I'm wondering this is
too
> > > much...
> > >
> > > TIA
> >
> >
> >

Relevant Pages

  • Re: Execute stored procedure only
    ... You need CONNECT capability to be able to get into the database and execute ... You can compare this to having permission to eat a piece of pie, ... Should I not be able to just execute SP through QA? ... right to execute stored procedure in database called "mydatabase". ...
    (microsoft.public.sqlserver.security)
  • Re: Execute stored procedure only
    ... Should I not be able to just execute SP ... What I meant is that since you denied every database permission you saw, ... Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx ...
    (microsoft.public.sqlserver.security)
  • RE: the Dts execution and the public role
    ... Yes, the user has permission to some special user database, and for the msdb ... and I put specific permission for execute the SP ...
    (microsoft.public.sqlserver.server)
  • Re: Stored Prcedure Security
    ... There is a section in BOL regarding cross database ownership chains and the ... > permission to read either table; ... > permission to execute the stored procedure, ...
    (microsoft.public.sqlserver.programming)
  • Re: System.Security.SecurityException was unhandled
    ... The exception gave you the CLSID. ... the first thing to check might be whether the COM server ... assembly actually has the permission in question. ... When I execute the application I received and error message. ...
    (microsoft.public.dotnet.security)