Re: Grant access to applications only

The data access should not be restricted so that already existing
applications can be switched to the new login method as easy as possible.

"Uri Dimant" wrote:

Hi
My aim is to remove all passwords from the client but also prevent users
from manipulating data.

Use Windows Authentication and GRANT an EXECUTE permission on stored
proceduers that read the data only


"ulrich schumacher" <ulrichschumacher@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:514A122C-96EE-4926-9D92-75251218820C@xxxxxxxxxxxxxxxx
Hi Uri,

thanks for your post!

My aim is to remove all passwords from the client but also prevent users
from manipulating data.
Maybe a central web service that provides the login data (via SSL) after
identifying the client assembly by its signature would be a solution.

Best regards
Ulrich


"Uri Dimant" wrote:

Hi
Create Windows/SQL Login dedicated to application and grant all
appropriate
permissions to the Login

"ulrich schumacher" <ulrichschumacher@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:8C26EF26-CC8C-4907-8E13-0F380A059394@xxxxxxxxxxxxxxxx
Hi all!

Is there a way to allow a .net application write access to sql server
but
to
deny a direct user login e.g. via management studio.

The background is that the users must not be able to manipulate the
data
directly but only within the application. Integrated security should be
used
as authentication type.

Thanks in advance
Ulrich






.

Relevant Pages

  • RE: Analysis Services Access Log
    ... Untill you upgrade to AS 2005 the data from these logs are reasonable ... Usually you only see every 10th login, ... > data access. ... I need to know who access to a cube, ...
    (microsoft.public.sqlserver.olap)
  • login page
    ... I want to create a Data Access pages but the validation uses a login table in ... within the Access dtabase ...
    (microsoft.public.access.security)
  • Re: Grant access to applications only
    ... from manipulating data. ... Use Windows Authentication and GRANT an EXECUTE permission on stored ... Maybe a central web service that provides the login data after ...
    (microsoft.public.sqlserver.security)
  • Re: Grant access to applications only
    ... My aim is to remove all passwords from the client but also prevent users ... from manipulating data. ... Create Windows/SQL Login dedicated to application and grant all appropriate ... deny a direct user login e.g. via management studio. ...
    (microsoft.public.sqlserver.security)
  • Re: Error 18456
    ... Perhaps some one tries to reach your server by using this ... Login ... "Uri Dimant" wrote: ... Do you see it in thr ERROR.LOG or when you attempt to connect? ...
    (microsoft.public.sqlserver.security)