Re: SQL Server application role

.. (nothing@xxxxxxxxxxx) writes:
Quick question in that when creating a SQL Server Role type of
Application, would this be considered a type of Impersonation method for
say a user who doesn't have rights to a table but this new app role
does?

That is up to the definition of "impersonation" you use, but to some
extent you could say it is, since USER etc return the name of the
application role, and not your username in the database. However, on
server-level there is no impersonation; SYSTEM_USER still returns your
login.


--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx

.

Relevant Pages

  • Re: SQL Server 2008 and Asp.Net 4.0 security question
    ... I do not want to use impersonation and special account since some ... Impersonation indeed seems like the best to me. ... As for real logins, you revoke the permission CONNECT SQL for these, so ... Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx ...
    (microsoft.public.sqlserver.security)
  • Re: Active Directory and SQL Server Connection
    ... If we use impersonation, don't I have to add every user/group to the SQL ... that would have access to the database in SQL Server, ... >> Hi Sahil, ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: SQL Server application role
    ... say a user who doesn't have rights to a table but this new app role ... That is up to the definition of "impersonation" you use, ... Links for SQL Server Books Online: ...
    (microsoft.public.sqlserver.security)
  • Re: ASP.NET IIS6 Impersonation - Explanation needed for this situa
    ... the impersonation setting does matter and the reason why is because ... the User isn't logging in with the SQL account which would be passed to SQL, ... Impersonation would not be a factor if the User's ...
    (microsoft.public.dotnet.security)
  • Impersonation and SQL Connections
    ... I'm having a problem concerning Impersonation while connecting to SQL ... application when connecting to the SQL Server, ...
    (microsoft.public.dotnet.framework.windowsforms)