Re: sql express 2005 security
- From: "bass_player [SBS-MVP]" <bass_player@xxxxxxxx>
- Date: Mon, 26 Nov 2007 11:53:59 +0800
Or...you can encrypt your connection string inside your app.config file like
how you do it in ASP.NET web.config. Here's a sample in C#
http://davidhayden.com/blog/dave/archive/2006/03/14/2883.aspx
"Erland Sommarskog" <esquel@xxxxxxxxxxxxx> wrote in message
news:Xns99F45900956Yazorman@xxxxxxxxxxxx
Ming (stm@xxxxxxxxxxxxxxxxx) writes:
I can't get your meaning...?!
Since my application will run on a standalone machine, I can't force
user to login using specific username.
If they can login, they can view the data, right?
Also, how could I distribute the application to client with a predefine
Windows a/c?
Cna you tell me more about them?
With Windows authentication, you don't include UserID and Password in
the connection strint, instead you have:
Integrated Security=SSPI;
All that is needed to make sure that the user has access to the server
and database.
And, yes, this means that the user will be able to connect to the database
by other means to view the data. But that is nothing you can prevent
anyway.
--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx
Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
.
- Follow-Ups:
- Re: sql express 2005 security
- From: Erland Sommarskog
- Re: sql express 2005 security
- From: Ming
- Re: sql express 2005 security
- References:
- sql express 2005 security
- From: Ming
- Re: sql express 2005 security
- From: Ming
- Re: sql express 2005 security
- From: Erland Sommarskog
- sql express 2005 security
- Prev by Date: Re: sql express 2005 security
- Next by Date: Re: SQL 2000
- Previous by thread: Re: sql express 2005 security
- Next by thread: Re: sql express 2005 security
- Index(es):
Relevant Pages
|
