|
Home > Archive > MS SQL Server > October 2006 > SQL User used for DSN and permissions....
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
SQL User used for DSN and permissions....
|
|
| PizzaGood 2006-10-24, 6:30 pm |
| Hi,
When I create a SQL user that will be used for a DSN to connect a web app to
the SQL Server does the user under Database Access only need PUBLIC or do
they need OWNER also?
The web app allows users to insert/update/delete records.
Thanks!
Mitch
| |
| Tibor Karaszi 2006-10-24, 6:30 pm |
| It is like asking "Is it OK for my users to be Everyone in Windows or do they need to be
Administrators?" Well, probably neither, but we don't know what the users will be doing, so we can't
say anything specific. The person who wrote the app know what the app is doing and can answer what
permissions someone using that app needs. Security is a broad topic, and I suggest you start by
reading up on it in Books Online, otherwise you probably end up granting too high privileges to that
users, "just to make the app work". Possibly db_datareader and db_datawriter, but again, we don't
know what the app does...
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www. solidqualitylearning
.com/
"PizzaGood" <PizzaGood@earthlink.com> wrote in message news:OUSGITZ3GHA.4024@TK2MSFTNGP03.phx.gbl...
> Hi,
>
> When I create a SQL user that will be used for a DSN to connect a web app to the SQL Server does
> the user under Database Access only need PUBLIC or do they need OWNER also?
>
> The web app allows users to insert/update/delete records.
>
> Thanks!
>
> Mitch
>
| |
| PizzaGood 2006-10-24, 6:31 pm |
| I also wrote the app, it's a basic app that allows users to add records,
update them or delete them.
The USER I need to create is trictly for the DSN and not for people to
connect to using Enterprise Manager.
"Tibor Karaszi" <tibor_please.no. email_karaszi@hotmai
l.nomail.com> wrote in
message news:OGgxK0a3GHA.3508@TK2MSFTNGP03.phx.gbl...
> It is like asking "Is it OK for my users to be Everyone in Windows or do
> they need to be Administrators?" Well, probably neither, but we don't know
> what the users will be doing, so we can't say anything specific. The
> person who wrote the app know what the app is doing and can answer what
> permissions someone using that app needs. Security is a broad topic, and I
> suggest you start by reading up on it in Books Online, otherwise you
> probably end up granting too high privileges to that users, "just to make
> the app work". Possibly db_datareader and db_datawriter, but again, we
> don't know what the app does...
>
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www. solidqualitylearning
.com/
>
>
> "PizzaGood" <PizzaGood@earthlink.com> wrote in message
> news:OUSGITZ3GHA.4024@TK2MSFTNGP03.phx.gbl...
>
| |
| Tibor Karaszi 2006-10-24, 6:31 pm |
| Sounds like db_datareader and db_datawriter will fit the bill. Or, you can grant SELECT, INSERT,
UPDATE and DELETE permissions on each relevant table, of course...
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www. solidqualitylearning
.com/
"PizzaGood" <PizzaGood@earthlink.com> wrote in message news:umkmzQx3GHA.4164@TK2MSFTNGP05.phx.gbl...
>I also wrote the app, it's a basic app that allows users to add records, update them or delete
>them.
>
> The USER I need to create is trictly for the DSN and not for people to connect to using Enterprise
> Manager.
>
>
>
>
> "Tibor Karaszi" <tibor_please.no. email_karaszi@hotmai
l.nomail.com> wrote in message
> news:OGgxK0a3GHA.3508@TK2MSFTNGP03.phx.gbl...
>
>
|
|
|
|
|