Re: Using application rolls in SQL Server

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Jan Weingärtner (jweingart_at_gmx.de)
Date: 06/19/04 

Date: Sat, 19 Jun 2004 11:19:02 +0200

> You could let your application authenticate and authorize its users and then use a SQL connection
> string with a fixed *SQL* user that has required access (but is unknown to application users).

This is my solution in any case. The problem is, that the transmitted password is _not_
really encrypted if i use standard security (it's easy to crack login and password) and
i dont want to use trusted/integrated security. So my hope is to increase security by using
application rolls.

best regards,
Jan

Relevant Pages

  • Re: Probably a simple question
    ... (Integrated security=sspi works like a charm when I am doing this all locally, btw, i.e. my SQL connection happens in a method or an instance of another class.) ... Whenever I try using integrated security in my connection string I always get back the message that it can't connect using ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Cannot create SQL connection after Server Security Hardening
    ... Help our ASP.NET Application Fails to create SQL Connection after ... Server Security Hardening ... System worked perfectly until Security ran "Hardening Scripts" ... connectionString, CommandType commandType, String commandText, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Access 2007 Runtime Security Issue
    ... by default Windows will not allow databases ... probable that you need to authorize the Access application. ... In Windows explorer, Right-click on the .mdb or .mde file and select ... It comes up with a Security alert message. ...
    (comp.databases.ms-access)
  • Question about Authorization Manager
    ... I have a question about the configuration of tasks and operations, and how they are interpreted by the "Authorize" method of the security application block. ... I have created an operation called "Print" and two tasks called "Access Financial Information" and "Print Check". ... Could someone enlighten me to why access to lower level tasks are not required in order for authorization of the higher level task to occur? ...
    (microsoft.public.dotnet.security)