Business Admin Permissions

I've got a web app (myApp) that users log into using SQL
Authentication. The users enter their userid & passwords into a login
form and these are used in the connection string for the rest of the
session. Users are assigned to SQL roles that dictates what
functionality is available to them. We can't use Windows
authentication.

I want to create admin (.NET) tool that will allow the business
administrator to do the following without needing help from IT:

* create new server logins that only have access to the myApp
database
* delete user/login accounts from the database/server
* add/delete users from roles in the myApp database
* reset passwords of users in the myApp database only
* enable accounts that have been locked out because their password
expired

How do I allow the business admin to do these things without 'over-
granting' them permissions on the server? I don't want them to be able
to screw with other databases or logins on the box.

Thanks,

.

Relevant Pages

  • Re: fix logins
    ... What about adding the login and fix the user's sid? ... passwords from the database? ... >Either specify the SID that the user has in the database ... >> How do you create the logins with the same password, ...
    (microsoft.public.sqlserver.server)
  • Re: Business Admin Permissions
    ... create new server logins that only have access to the myApp ... delete user/login accounts from the database/server ... add/delete users from roles in the myApp database ...
    (microsoft.public.sqlserver.security)
  • Re: Databases
    ... If your data tables were located at a sub-folder other than MyApp, ... able to switch with the SET DEFAULT. ... I think your problem is that your original design has your tables in MyApp, ... Running the form continues to use the table that is part of the database ...
    (microsoft.public.fox.programmer.exchange)
  • ODBC connection
    ... I have linked several tables to a database called sondb on the SQL server ... I have used a DSN called MYAPP with userid and password of ... Once I open the database and run my query I have to sgn on using the user id ...
    (microsoft.public.access.queries)