Re: Connection to a MS SQL Server Table (newbie)



It does not defeat the purpose (as bob said) because all of the data
contained within an ASP page is not viewable by the user unless directly
written to the page.

You find that HTAccess is worth a look /consideration ... this provides the
ability to set priveleges and groups, etc

--
Jon
warpedpixel@xxxxxxxxx
Look at that dead pixel on your screen! *SLAP* Gotcha!

"Don" <someone@xxxxxxxxxxxxx> wrote in message
news:OxiRVP0dFHA.3184@xxxxxxxxxxxxxxxxxxxxxxx
>I am getting started on a prototype site and have set up one of my home
> machines with IIS and MS SQL Server. Based on several on the posts to
> this
> group, I have been reviewing the ADO connection strings. However, what
> really puzzles me is that it appears you need to use an unsecured SQL
> Server
> (no user name and no password) or provide the username and password in the
> connection string. The latter seems to defeat the purpose of a password.
>
> What I am guessing at this point is that a SQL server account needs to be
> set up with the only the necessary permissions to get the job done. Is
> this
> correct?
>
> In the bigger picture (might be a vision or a hallucination!), this site
> will be a secure site (https://) with username/password access. It is
> basically a departmental personnel database tailored to our specific
> needs.
> The objective is to provide some limiting of access based on groups and
> work
> units (i.e. Group Lead A can only view the people organizationally below
> him).
>
> Any comments, thoughts, references, etc will be greatly appreciated!
>
> Thanks!
>
> Don
>
>
>


.



Relevant Pages

  • Re: Re: one more legal statistical licences will freely settle the favours
    ... We defeat them, then we away increase Ayman and ... Ayub's embarrassed accuracy. ... Otherwise the purpose in Usha's ...
    (sci.crypt)
  • Re: Modifying Primary Key Values
    ... Do you have an alternate key you can use for this purpose? ... > I send an UPDATE script to sql server. ... > How can I make the true correspondence between "new" and "old" rows? ...
    (microsoft.public.sqlserver.programming)
  • Re: Websites known for malware
    ... some users are still on dial-up and regardless ... Posting a link does NOT defeat the purpose., well maybe to you but not ... > identified as being a malware rat?! ...
    (microsoft.public.security)
  • RE: passing enum value as an argument
    ... But it *doesn't* defeat the purpose. ... It doesn't stop the compiler from ... noticing if he's trying to pass in a value which isn't in the enum. ...
    (microsoft.public.dotnet.general)
  • Re: ecb works , but cfb and cbc dont ( php )
    ... i could be missing something, but this seems to defeat the purpose of ... using this encryption module. ... I don't see why that "defeats the purpose". ... "defeat the purpose" of a C compiler... ...
    (sci.crypt)