Re: SQL Server Application Roles
From: Chuck Hawkins (charles.hawkins_at_NOSPAMjenzabar.net)
Date: 11/21/05
- Previous message: Russell Stevens: "Re: Capture IP Address"
- In reply to: Dan Guzman: "Re: SQL Server Application Roles"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 21 Nov 2005 09:24:54 -0500
Au contraire.
Application roles have certainly not been deprecated in SQL 2005. They are
very much alive and well and actually improved. In SQL 2005 you can actually
unset the application role and return back to the user's original context.
This is conveninent in allowing you to move in and out of different parts of
an application with different security contexts. One application role might
have broad rights in one part of a schema while another might have broad
rights in another part. You might have a master control table specifying
which users can walk into which application roles.
Chuck Hawkins
"Dan Guzman" <guzmanda@nospam-online.sbcglobal.net> wrote in message
news:uwPjvwc7FHA.3636@TK2MSFTNGP09.phx.gbl...
>I assume you are using SQL 2000. Application roles have been deprecated in
>SQL Server 2005.
>
> You need a single-quote after the password literal. Also, when you use
> application roles, consider disabling connection pooling.
>
> --
> Hope this helps.
>
> Dan Guzman
> SQL Server MVP
>
> "Jonathan Allen" <x@x.x> wrote in message
> news:eeb26qV7FHA.3388@TK2MSFTNGP11.phx.gbl...
>> Allow me to restate my question.
>>
>> What the hell is the right way to use application roles from VB/C#? When
>> I try the below code, I get an exception the second time I call
>> GetDBConnection.
>>
>> --
>> Jonathan Allen
>>
>>
>> "Jonathan Allen" <x@x.x> wrote in message
>> news:eF4AhZV7FHA.472@TK2MSFTNGP15.phx.gbl...
>>> Is this the correct way to use application roles?
>>>
>>> Public Function GetDBConnection() As SqlConnection
>>> Dim oCon As New SqlConnection(myConnectionString)
>>> oCon.Open()
>>> Using oCmd As SqlCommand = oCon.CreateCommand
>>> oCmd.CommandText = "IF NOT User_NAME() = 'app_name' Exec
>>> sp_setapprole 'app_name' ,'password"
>>> oCmd.ExecuteNonQuery()
>>> End Using
>>> Return oCon
>>>
>>> What is a good way to embed/encrypt the application role's password in
>>> the program?
>>>
>>> --
>>> Jonathan Allen
>>>
>>>
>>>
>>>
>>
>>
>
>
- Previous message: Russell Stevens: "Re: Capture IP Address"
- In reply to: Dan Guzman: "Re: SQL Server Application Roles"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
