SQLAgentMail: application

Showing posts with label application. Show all posts

Friday, March 30, 2012

question when using application role

Hi,
If i use application role...how do i pass the connection string in order
to connect to sql server? Can anyone give me an example?
Thanks a lot!
regards,
florenceleeWhen you use an application role, the app connects to the server in EXACTLY
the same way it would if there were NO appl role..
However AFTER the connection is made the app executes.
sp_Setapprole stored procedure, passing in the role name and password.
There is an example in books online. This causes the entire permission set
for the connection to be completely replaced by the permissions associated
with the role...
Hope this helps.
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"Florencelee" <florencelee@.visualsolutions.com.my> wrote in message
news:etEWinVzEHA.2036@.TK2MSFTNGP12.phx.gbl...
> Hi,
> If i use application role...how do i pass the connection string in order
> to connect to sql server? Can anyone give me an example?
> --
> Thanks a lot!
> regards,
> florencelee
>

question when using application role

Hi,
If i use application role...how do i pass the connection string in order
to connect to sql server? Can anyone give me an example?
--
Thanks a lot!
regards,
florenceleeWhen you use an application role, the app connects to the server in EXACTLY
the same way it would if there were NO appl role..
However AFTER the connection is made the app executes.
sp_Setapprole stored procedure, passing in the role name and password.
There is an example in books online. This causes the entire permission set
for the connection to be completely replaced by the permissions associated
with the role...
Hope this helps.
--
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"Florencelee" <florencelee@.visualsolutions.com.my> wrote in message
news:etEWinVzEHA.2036@.TK2MSFTNGP12.phx.gbl...
> Hi,
> If i use application role...how do i pass the connection string in order
> to connect to sql server? Can anyone give me an example?
> --
> Thanks a lot!
> regards,
> florencelee
>

question when using application role

Hi,
If i use application role...how do i pass the connection string in order
to connect to sql server? Can anyone give me an example?
Thanks a lot!
regards,
florencelee
When you use an application role, the app connects to the server in EXACTLY
the same way it would if there were NO appl role..
However AFTER the connection is made the app executes.
sp_Setapprole stored procedure, passing in the role name and password.
There is an example in books online. This causes the entire permission set
for the connection to be completely replaced by the permissions associated
with the role...
Hope this helps.
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"Florencelee" <florencelee@.visualsolutions.com.my> wrote in message
news:etEWinVzEHA.2036@.TK2MSFTNGP12.phx.gbl...
> Hi,
> If i use application role...how do i pass the connection string in order
> to connect to sql server? Can anyone give me an example?
> --
> Thanks a lot!
> regards,
> florencelee
>

Wednesday, March 28, 2012

Question regarding Security and user authentication

Hey. We have an application which is opened by a user to enter in their
username and password. This data resides in SQL 2000 but I'm upgrading to SQL
2005. I need to store the passwords of users in an encrypted format. How
would I do this?
Can you provide with the steps for the procedure? thank you.This is a multi-part message in MIME format.
--010100040609020901020201
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Have you tried looking in BOL?
How To: Encrypt a Column of Data
<http://msdn2.microsoft.com/en-us/library/ms179331.aspx>
--
*mike hodgson*
http://sqlnerd.blogspot.com
Tejas Parikh wrote:
>Hey. We have an application which is opened by a user to enter in their
>username and password. This data resides in SQL 2000 but I'm upgrading to SQL
>2005. I need to store the passwords of users in an encrypted format. How
>would I do this?
>Can you provide with the steps for the procedure? thank you.
>
--010100040609020901020201
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<tt>Have you tried looking in BOL? 
 
<a href="http://links.10026.com/?link=How">http://msdn2.microsoft.com/en-us/library/ms179331.aspx">How
To: Encrypt a Column of Data</a> 
</tt>
<div class="moz-signature">
<title></title>
<meta http-equiv="Content-Type" content="text/html; ">
-- 
 mike
hodgson 
<a href="http://links.10026.com/?link=http://sqlnerd.blogspot.com</a>">http://sqlnerd.blogspot.com">http://sqlnerd.blogspot.com</a>

</div>
 
 
Tejas Parikh wrote:
<blockquote cite="midCD30DC41-20C2-4E08-9668-87E020E95E12@.microsoft.com"
type="cite">
<pre wrap="">Hey. We have an application which is opened by a user to enter in their
username and password. This data resides in SQL 2000 but I'm upgrading to SQL
2005. I need to store the passwords of users in an encrypted format. How
would I do this?
Can you provide with the steps for the procedure? thank you.
</pre>
</blockquote>
</body>
</html>
--010100040609020901020201--

Question regarding returning data from stored procedure.

Hi all,
I am facing one problem while getting data from stored procedure into
.net application in dataset.
I have two tables say table1 and table2 in which i am continuously
adding data. When i am adding data to table1 same time i am adding data
to table2. This whole process is done through some other application
and not through my application.
But i have one stored procedure which is returing me data from table1
and table2. My logic is i am getting data from table1 into temp table(i
have some more condition for that purpose i need temp table) and then
for those records which are there in temp table i am finding its
equivalent entry in table2. means i should nearly get data same from
both the table.
But what is happening is when i am running same queries which i am
using in sp through query analyzer it is giving me proper resule. Bue
when i try to run those sp and store result of those sp into dataset i
am not getting all records at the same time.
So my question is why this is happening. Is is like that if some other
applications are updating those table then i can't retrieve those
records.
Please clear me if i am wrong.
Thanks in advance.sounds like a concurrency issue.
Please google or BoL for concurrency, locking, blocking, deadlocs and
phantom updates.
"Archana" wrote:

> Hi all,
> I am facing one problem while getting data from stored procedure into
> ..net application in dataset.
> I have two tables say table1 and table2 in which i am continuously
> adding data. When i am adding data to table1 same time i am adding data
> to table2. This whole process is done through some other application
> and not through my application.
> But i have one stored procedure which is returing me data from table1
> and table2. My logic is i am getting data from table1 into temp table(i
> have some more condition for that purpose i need temp table) and then
> for those records which are there in temp table i am finding its
> equivalent entry in table2. means i should nearly get data same from
> both the table.
> But what is happening is when i am running same queries which i am
> using in sp through query analyzer it is giving me proper resule. Bue
> when i try to run those sp and store result of those sp into dataset i
> am not getting all records at the same time.
> So my question is why this is happening. Is is like that if some other
> applications are updating those table then i can't retrieve those
> records.
> Please clear me if i am wrong.
> Thanks in advance.
>

Monday, March 26, 2012

Question regarding "New Role Assignment"

Hi All,
I have share point server and report server on two different machines but in
the same domain. Our application categorizes users ,from Active Directory, in
Sharepoint sitegroups. For eg Marketing , Finance , Manager are sitegroups in
our application.
Is it possible to add these sitegroups in "New Role Assignment" for a given
report so that each member of the sitegroup can now access to the given
report?
Thanks in advance for any assistance provided.
KunjalTry using domain\Marketing
"Kunjal" wrote:
> Hi All,
> I have share point server and report server on two different machines but in
> the same domain. Our application categorizes users ,from Active Directory, in
> Sharepoint sitegroups. For eg Marketing , Finance , Manager are sitegroups in
> our application.
> Is it possible to add these sitegroups in "New Role Assignment" for a given
> report so that each member of the sitegroup can now access to the given
> report?
> Thanks in advance for any assistance provided.
> Kunjal
>|||I'm not sure if you can use SharePoint Sitegroups in New Role Assignment, as
they are probably SharePoint-only.
But you can use AD groups in Reporting Services, like Dillig says. If you
base both SharePoint Sitegroups and your Reporting Services Roles on the
same AD groups, you should be fine. Add <domainname>\<groupname> to the
roles you need to add them to.
Kaisa M. Lindahl
"Kunjal" <Kunjal@.discussions.microsoft.com> wrote in message
news:45CF5AC6-8DCA-4283-B0C5-1A136A77D12E@.microsoft.com...
> Hi All,
> I have share point server and report server on two different machines but
> in
> the same domain. Our application categorizes users ,from Active Directory,
> in
> Sharepoint sitegroups. For eg Marketing , Finance , Manager are sitegroups
> in
> our application.
> Is it possible to add these sitegroups in "New Role Assignment" for a
> given
> report so that each member of the sitegroup can now access to the given
> report?
> Thanks in advance for any assistance provided.
> Kunjal
>

Wednesday, March 21, 2012

Question on SQLExpress

Hello,
We are wanting to switch from Access 2003 to MSDE or SQLExpress. We
currently have an application that syncs data from the client's access db to
our SQL2k server. We were wanting to remove ACCESS 2003 and use MSDE or
SQLExpress and use something to manage the replication between the
two(preferably no coding). I have tested MSDE merge with our SQL2K and all
works well. The problem is that the SQL client tools are not licensed to
work on a client's box that has MSDE. My question is there a tool that will
setup/manage the replication between MSDE and SQL2k? What about SQLExpress?
We are in the testing phase and are looking for a viable solution with cost
in mind(we currently have about 150 remote clients). We will be upgrading to
Yukon, replacing our SQL2k box, when it is released. Any suggestions, links
to software and documentation would be great!
Jake
There will be an Express Manager (XM), with a subset of functionality
compared to Management Studio. However, the tool is not available yet:
http://www.aspfaq.com/sql2005/show.asp?id=3
To find out whether or not replication will be supported from XM:
http://www.aspfaq.com/sql2005/show.asp?id=1
http://www.aspfaq.com/
(Reverse address to reply.)
"Jake" <rondican@.hotmail.com> wrote in message
news:uesmVhBsEHA.192@.tk2msftngp13.phx.gbl...
> Hello,
> We are wanting to switch from Access 2003 to MSDE or SQLExpress. We
> currently have an application that syncs data from the client's access db
to
> our SQL2k server. We were wanting to remove ACCESS 2003 and use MSDE or
> SQLExpress and use something to manage the replication between the
> two(preferably no coding). I have tested MSDE merge with our SQL2K and all
> works well. The problem is that the SQL client tools are not licensed to
> work on a client's box that has MSDE. My question is there a tool that
will
> setup/manage the replication between MSDE and SQL2k? What about
SQLExpress?
> We are in the testing phase and are looking for a viable solution with
cost
> in mind(we currently have about 150 remote clients). We will be upgrading
to
> Yukon, replacing our SQL2k box, when it is released. Any suggestions,
links
> to software and documentation would be great!
> Jake
>
sql

question on SQL schema

My company is currently developing a new database driven
application. Originally we had designed the structure
with three database's (based on update schedule and
administration). My Oracle DBA has looked over the plan
and recomends we put the three databases into one and
seperate as multiple schemas. I have looked all over
microsoft.com and haven't found anything that discusses
multiple schemas. I'm guessing its a different
terminology on the Microsoft side.
How would I go about developing a single database that is
segregated into three so called schemas. I know Oracle
uses [schema.]tablename and SQL uses
server.database.owner.tablename. Does this mean I create
an owner for each dataset (schema).
thanks
JustinHi Justin,
I think you are right. Oracle uses [schema.]tablename and SQL uses
server.database.owner.tablename. You can create an owner for each dataset
(schema).
You may want to know what is "owner" in SQL Server, please refer to "Owners
and Permissions", "Database Object Owner" in SQL Books Online.
~~~~~~~~~~~~~~~~~
Every object in Microsoft SQL Server 2000 is owned by a user. The owner is
identified by a database user identifier (ID). When an object is first
created, the only user ID that can access the object is the user ID of the
owner or creator. For any other user to access the object, the owner must
grant permissions to that user. If the owner wants only specific users to
access the object, the owner can grant permissions to those specific users.
For tables and views, the owner can grant INSERT, UPDATE, DELETE, SELECT,
and REFERENCES permissions, or ALL permissions. A user must have INSERT,
UPDATE, DELETE, or SELECT permissions on a table before they can specify it
in INSERT, UPDATE, DELETE, or SELECT statements. The REFERENCES permission
lets the owner of another table use columns in your table as the target of
a REFERENCES FOREIGN KEY constraint from their table. The following example
illustrates granting SELECT permissions to a group named Teachers and
REFERENCES permissions to another development user:
GRANT SELECT ON MyTable TO Teachers
GRANT REFERENCES (PrimaryKeyCol) ON MyTable to DevUser1
The owner of a stored procedure can grant EXECUTE permissions for the
stored procedure. If the owner of a base table wants to prevent users from
accessing the table directly, they can grant permissions on views or stored
procedures referencing the table, but not grant any permissions on the
table itself. This is the foundation of the SQL Server mechanisms to ensure
that users do not see data they are not authorized to access.
Users can also be granted statement permissions. Some statements, such as
CREATE TABLE and CREATE VIEW, can only be executed by certain users (in
this case, the dbo user). If the dbo wants another user to be able to
create tables or views, they must grant the permission to execute these
statements to that user.
~~~~~~~~~~~~~~~~~
Sincerely,
William Wang
Microsoft Partner Online Support
Get Secure! - www.microsoft.com/security
=====================================================When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--
| Content-Class: urn:content-classes:message
| From: "Justin King" <jusking@.firstam.com>
| Sender: "Justin King" <jusking@.firstam.com>
| Subject: question on SQL schema
| Date: Tue, 12 Aug 2003 20:58:23 -0700
| Lines: 19
| Message-ID: <090d01c3614f$23f86d60$a401280a@.phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcNhTyP4GoQlr1/wQteBwfzcYZvj7Q==| Newsgroups: microsoft.public.sqlserver.server
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.sqlserver.server:300961
| NNTP-Posting-Host: TK2MSFTNGXA12 10.40.1.164
| X-Tomcat-NG: microsoft.public.sqlserver.server
|
| My company is currently developing a new database driven
| application. Originally we had designed the structure
| with three database's (based on update schedule and
| administration). My Oracle DBA has looked over the plan
| and recomends we put the three databases into one and
| seperate as multiple schemas. I have looked all over
| microsoft.com and haven't found anything that discusses
| multiple schemas. I'm guessing its a different
| terminology on the Microsoft side.
|
| How would I go about developing a single database that is
| segregated into three so called schemas. I know Oracle
| uses [schema.]tablename and SQL uses
| server.database.owner.tablename. Does this mean I create
| an owner for each dataset (schema).
|
| thanks
|
| Justin
|

Tuesday, March 20, 2012

Question on Report Builder

I am launching the Report Builder from my web application. The launching works fine. The Report Builder displays all the models published on the Report Server, whereas the user launching the report builder doesnt have permission on most of the folders containing the models. The permission set on the folders individually (not inherit from parent) using Management Studio.

The Report Server and the Report Builder folder under that both are running with Integrated Windows Authentication.

Is there anything am missing to check ? I want the user should be able to see only those models, which he/she has been given permission to access.

For info, the web application from where the Report Builder is launched is using Forms Authentication. So, Anonymous Access is enabled. If this is the problem, can I create a separate web page and inside a folder (under website) and apply Integrated Windows Authentication to the folder and launch Report Builder from the web page. Will it work ?

Thanks in advance.

Users will only see the models to which they have been granted the View Models permission (part of the the Browser and Report Builder roles by default), with two exceptions:

1. Members of the local administrators group will always see all models on the Report Server regardless of permission settings.

2. If you launch Report Builder as a given user, then change the group membership of that user and re-launch the application, you will not see any changes in behavior because ClickOnce actually started a background process the first time around called dfsvc.exe, and this process is what actually launches the application both times. Since the background process doesn't get restarted, it is still running with the original security token, and is unaware of the change in group membership. In my experience, if you just kill the dfsvc.exe process and re-launch your application, everything works as expected the next time around.

|||This all sounds great, how do I, from my own website, launch report builder as a known user?|||

Hi,

Did you have luck in launching the report builder from your site with a specific user security? I am also having the same challenge.

Any help will be appreciated.

|||

Rajeeb,

May I ask you a question,

How do you setup the access right to enable the users only see their folders.

say for user A, he can only see Folder A

User B, can only see Folder B.

Folder A and B should be subfolders of Home. I tried to do it. but if I don't give user A the access to Home, it won't show report builder icon on the web page when I log in as user A.

Thanks

Jack

|||Hi Jack,

You can setup access rights as per your example either after you login to Reporting Services using Management Studio or from Report Manager. You have to give permission to both A and B on Home, then in Folder A and B properties, remove the other user (dont follow the option of inheriting access rights from parent folder).

We have already moved on to implement Forms Authentication and handle security our own way. Our web application and report manager works perfectly fine. But, Report Builder using Forms Authentication has so many issues. We havent been successfully implement it yet, its been almost one year now.

I have put many topics on Report Builder using forms authentication but noone replies (just do a search on Report Builder Forms authentication). Its been really frustrating. Imagine after going live with 2 clients on same report server, having problem with Report Builder. We are stuck and nowhere now. We made a big mistake of selling the features of adhoc reports.

My suggestion is, wait for future releases (unless you are in a hurry).

Thanks.
|||

Rajeeb,

Thank you for your reply.

Could you please tell me what right you give user A and B on the Home folder. It seems to me you have to give them content manager right. otherwise the report builder icon won't show on the report manager web page.

Thank you for your help

Jack

Question on Report Builder

The Report Server and the Report Builder folder under that both are running with Integrated Windows Authentication.

Is there anything am missing to check ? I want the user should be able to see only those models, which he/she has been given permission to access.

Thanks in advance.

Users will only see the models to which they have been granted the View Models permission (part of the the Browser and Report Builder roles by default), with two exceptions:

1. Members of the local administrators group will always see all models on the Report Server regardless of permission settings.

|||This all sounds great, how do I, from my own website, launch report builder as a known user?|||

Hi,

Did you have luck in launching the report builder from your site with a specific user security? I am also having the same challenge.

Any help will be appreciated.

|||

Rajeeb,

May I ask you a question,

How do you setup the access right to enable the users only see their folders.

say for user A, he can only see Folder A

User B, can only see Folder B.

Folder A and B should be subfolders of Home. I tried to do it. but if I don't give user A the access to Home, it won't show report builder icon on the web page when I log in as user A.

Thanks

Jack

|||Hi Jack,

My suggestion is, wait for future releases (unless you are in a hurry).

Thanks.|||

Rajeeb,

Thank you for your reply.

Thank you for your help

Jack

Question on Report Builder

The Report Server and the Report Builder folder under that both are running with Integrated Windows Authentication.

Is there anything am missing to check ? I want the user should be able to see only those models, which he/she has been given permission to access.

Thanks in advance.

Users will only see the models to which they have been granted the View Models permission (part of the the Browser and Report Builder roles by default), with two exceptions:

1. Members of the local administrators group will always see all models on the Report Server regardless of permission settings.

|||This all sounds great, how do I, from my own website, launch report builder as a known user?|||

Hi,

Did you have luck in launching the report builder from your site with a specific user security? I am also having the same challenge.

Any help will be appreciated.

|||

Rajeeb,

May I ask you a question,

How do you setup the access right to enable the users only see their folders.

say for user A, he can only see Folder A

User B, can only see Folder B.

Folder A and B should be subfolders of Home. I tried to do it. but if I don't give user A the access to Home, it won't show report builder icon on the web page when I log in as user A.

Thanks

Jack

|||Hi Jack,

My suggestion is, wait for future releases (unless you are in a hurry).

Thanks.|||

Rajeeb,

Thank you for your reply.

Thank you for your help

Jack

Monday, March 12, 2012

Question on port 1433 on a remote server

Hi,I am using a remote sql server 2005 install. Our application connects directly to the dB from a desktop application and a mobile application.I was just wondering what the best way to secure this connection. Everytime we want to do a demo for a potential client we have to allow a new IP to access port 1433 in order to connect to the database. This is becoming very expensive for us. Does anyone have an idea of how we can both secure the connection to our dB and not have to keep adding new IP's too the approved list on our Firewall?Thanks very much,Tony

How about using a VPN across the firewall you could then work in the intranet.

HTH, jens Suessmeyer.

http://www.sqlserver2005.de

Friday, March 9, 2012

Question on merge replication

We are working on an application that is running data on a local sql
server 2000 database. There is a second sql server on a different
domain, connected via vpn. Database on main domain sql server is
replicated / merge / push published to the 2nd domain sql server
The goal is to be available 24/7 for 100% so the plan is when the main
server becomes unavailable users are rerouted and the 2nd server takes
over. When the 1st becomes available again the data on the 1st server
should be updated from the 2nd and is supposed to resum
We are wondering now if Merge replication is is the way to go AND how
to set it up.
TIA, Martin
Merge replication can be use for this the caveats are
1) latency. Latency can be 1 minute or longer depending on the volume of
your transactions. This means if your publisher goes belly up, and your
standby (subscriber) server comes on line, it may not have all the records
which your publisher has
2) replication will add a guid column to your tables which may break the
application which is using these tables
Bi-directional replication is ideal for this as
1) latency is typically much less
2) you don't have to add a guid column
3) bi-directional replication works best when the transactions originate at
one node at a time
To set up merge replication go to Tools, point to replication, and click
create and manage publications and follow the prompts
To set up bi-directional transactional replication you are best to get the
updated BOL, and search on Implementing Nonpartitioned, Bidirectional,
Transactional Replication.
Hilary Cotter
Looking for a book on SQL Server replication?
http://www.nwsu.com/0974973602.html
"Martin Heuckeroth" <nick@.nospam.invalid> wrote in message
news:4thvi0d35qmir83nnri6ud7tpcclqu6b79@.4ax.com...
>
> We are working on an application that is running data on a local sql
> server 2000 database. There is a second sql server on a different
> domain, connected via vpn. Database on main domain sql server is
> replicated / merge / push published to the 2nd domain sql server
> The goal is to be available 24/7 for 100% so the plan is when the main
> server becomes unavailable users are rerouted and the 2nd server takes
> over. When the 1st becomes available again the data on the 1st server
> should be updated from the 2nd and is supposed to resum
> We are wondering now if Merge replication is is the way to go AND how
> to set it up.
> TIA, Martin
>

Monday, February 20, 2012

Question on Application roles.

sql2k
Im comparing a username/ password to an App role/ password and Im just not
seeing the logic here. An App either needs to supply a username/ password or
a "sp_setapprole @.rolename = 'TestRole' ,@.password ='test'". Either way they
are granted access to the DB. Either way they can only execute what I allow
them too(A user cant run a SELECT if I dont grant him access.). How is this
any safer?
TIA, ChrisR
Even in the case of using an app role, you still need a login to the server.
The benefit of an app role is that you can share server credentials amongst
a variety of apps, while still keeping data security partitioned. It's just
another way of slicing and dicing from a security point of view. I don't
see one method as any safer or less safe than any other method...
Adam Machanic
Pro SQL Server 2005, available now
http://www.apress.com/book/bookDisplay.html?bID=457
"ChrisR" <ChrisR@.discussions.microsoft.com> wrote in message
news:427310C9-210E-4A9F-A893-F8AE89A60E94@.microsoft.com...
> sql2k
> Im comparing a username/ password to an App role/ password and Im just not
> seeing the logic here. An App either needs to supply a username/ password
> or
> a "sp_setapprole @.rolename = 'TestRole' ,@.password ='test'". Either way
> they
> are granted access to the DB. Either way they can only execute what I
> allow
> them too(A user cant run a SELECT if I dont grant him access.). How is
> this
> any safer?
> TIA, ChrisR
|||Users do not have the password of the application role, only the application
has it.
One example is, users can have write access only thru the application role
but not using their Windows account. If they run the application they can
change data. If they use other tools like Query Analyzer or Access they would
not have write permissions.
Ben Nevarez, MCDBA, OCP
Database Administrator
"ChrisR" wrote:

> sql2k
> Im comparing a username/ password to an App role/ password and Im just not
> seeing the logic here. An App either needs to supply a username/ password or
> a "sp_setapprole @.rolename = 'TestRole' ,@.password ='test'". Either way they
> are granted access to the DB. Either way they can only execute what I allow
> them too(A user cant run a SELECT if I dont grant him access.). How is this
> any safer?
> TIA, ChrisR

Question on Application roles.

sql2k
Im comparing a username/ password to an App role/ password and Im just not
seeing the logic here. An App either needs to supply a username/ password or
a "sp_setapprole @.rolename = 'TestRole' ,@.password ='test'". Either way they
are granted access to the DB. Either way they can only execute what I allow
them too(A user cant run a SELECT if I dont grant him access.). How is this
any safer?
TIA, ChrisREven in the case of using an app role, you still need a login to the server.
The benefit of an app role is that you can share server credentials amongst
a variety of apps, while still keeping data security partitioned. It's just
another way of slicing and dicing from a security point of view. I don't
see one method as any safer or less safe than any other method...
Adam Machanic
Pro SQL Server 2005, available now
http://www.apress.com/book/bookDisplay.html?bID=457
--
"ChrisR" <ChrisR@.discussions.microsoft.com> wrote in message
news:427310C9-210E-4A9F-A893-F8AE89A60E94@.microsoft.com...
> sql2k
> Im comparing a username/ password to an App role/ password and Im just not
> seeing the logic here. An App either needs to supply a username/ password
> or
> a "sp_setapprole @.rolename = 'TestRole' ,@.password ='test'". Either way
> they
> are granted access to the DB. Either way they can only execute what I
> allow
> them too(A user cant run a SELECT if I dont grant him access.). How is
> this
> any safer?
> TIA, ChrisR|||Users do not have the password of the application role, only the application
has it.
One example is, users can have write access only thru the application role
but not using their Windows account. If they run the application they can
change data. If they use other tools like Query Analyzer or Access they woul
d
not have write permissions.
Ben Nevarez, MCDBA, OCP
Database Administrator
"ChrisR" wrote:

> sql2k
> Im comparing a username/ password to an App role/ password and Im just not
> seeing the logic here. An App either needs to supply a username/ password
or
> a "sp_setapprole @.rolename = 'TestRole' ,@.password ='test'". Either way th
ey
> are granted access to the DB. Either way they can only execute what I allo
w
> them too(A user cant run a SELECT if I dont grant him access.). How is thi
s
> any safer?
> TIA, ChrisR

Question on Application roles.

sql2k
Im comparing a username/ password to an App role/ password and Im just not
seeing the logic here. An App either needs to supply a username/ password or
a "sp_setapprole @.rolename = 'TestRole' ,@.password ='test'". Either way they
are granted access to the DB. Either way they can only execute what I allow
them too(A user cant run a SELECT if I dont grant him access.). How is this
any safer?
TIA, ChrisREven in the case of using an app role, you still need a login to the server.
The benefit of an app role is that you can share server credentials amongst
a variety of apps, while still keeping data security partitioned. It's just
another way of slicing and dicing from a security point of view. I don't
see one method as any safer or less safe than any other method...
Adam Machanic
Pro SQL Server 2005, available now
http://www.apress.com/book/bookDisplay.html?bID=457
--
"ChrisR" <ChrisR@.discussions.microsoft.com> wrote in message
news:427310C9-210E-4A9F-A893-F8AE89A60E94@.microsoft.com...
> sql2k
> Im comparing a username/ password to an App role/ password and Im just not
> seeing the logic here. An App either needs to supply a username/ password
> or
> a "sp_setapprole @.rolename = 'TestRole' ,@.password ='test'". Either way
> they
> are granted access to the DB. Either way they can only execute what I
> allow
> them too(A user cant run a SELECT if I dont grant him access.). How is
> this
> any safer?
> TIA, ChrisR|||Users do not have the password of the application role, only the application
has it.
One example is, users can have write access only thru the application role
but not using their Windows account. If they run the application they can
change data. If they use other tools like Query Analyzer or Access they would
not have write permissions.
Ben Nevarez, MCDBA, OCP
Database Administrator
"ChrisR" wrote:
> sql2k
> Im comparing a username/ password to an App role/ password and Im just not
> seeing the logic here. An App either needs to supply a username/ password or
> a "sp_setapprole @.rolename = 'TestRole' ,@.password ='test'". Either way they
> are granted access to the DB. Either way they can only execute what I allow
> them too(A user cant run a SELECT if I dont grant him access.). How is this
> any safer?
> TIA, ChrisR

Friday, March 30, 2012

question when using application role

question when using application role

question when using application role

Wednesday, March 28, 2012

Question regarding Security and user authentication

Question regarding Security and user authentication

Question regarding returning data from stored procedure.

Monday, March 26, 2012

Question regarding "New Role Assignment"

Wednesday, March 21, 2012

Question on SQLExpress

question on SQL schema

Tuesday, March 20, 2012

Question on Report Builder

Question on Report Builder

Question on Report Builder

Monday, March 12, 2012

Question on port 1433 on a remote server

Friday, March 9, 2012

Question on merge replication

Monday, February 20, 2012

Question on Application roles.

Question on Application roles.

Question on Application roles.

SQLAgentMail

Blog Archive

About Me