Database Access Security Issue

From: John********** (anonymous_at_discussions.microsoft.com)
Date: 03/25/04 

Date: Wed, 24 Mar 2004 16:01:08 -0800

Hello:

I have a simple situation where my web service wants to connect to a database, but I need to set the security settings so it can.

I have tried giving IWAM and IUSR Read/Write access to the database folder, which works fine on Win2000 but not on Win2003. I really would rather not have to do this in the first place since it seems like a security hole.

I have tried using impersonation in the web.config file :

<identity impersonate=true userName="ComputerName\Administrator" password="whatever"/>

This works fine, but I don't think my customers are going to go for it, since it seems like another security hole.

Is there a CORRECT/SECURE way to do this? All I want to do is query a database.

Thanks,

John

Relevant Pages

  • Re: Access 2003 Macro Security Modification
    ... Hello Mike and thanks for your reply. ... high security settings. ... > kind of setting on the database or change a setting permanently in Access. ...
    (microsoft.public.access.modulesdaovba)
  • Re: setting a password on a button on the switchboard
    ... Could you send me the sample database for the fourth option (4. ... > Security in an Access database can probably be broken down into two big ... > points about being easier than User Level Security, ... > What type of data are you trying to protect? ...
    (microsoft.public.access.forms)
  • Re: access 2003
    ... security in access 2003. ... The data will go on the server and the program database ... than the alternative of creating an mde file. ... MDW file from the written record. ...
    (microsoft.public.access.conversion)
  • Re: access 2003
    ... security in access 2003. ... The data will go on the server and the program database ... than the alternative of creating an mde file. ... MDW file from the written record. ...
    (microsoft.public.access.conversion)
  • Re: Is this possible??
    ... I understand Windows security but since I've not seen A2007 live, ... The backend is on the server in it's own file. ... database, but everyone does not need to have access to tblwage which is ...
    (microsoft.public.access.tablesdbdesign)