Re: prevent developers writting to our SQL DB ?

From: Mark Allison (marka_at_no.tinned.meat.mvps.org)
Date: 10/06/04 

Date: Wed, 6 Oct 2004 12:44:41 +0100

Scott,

Your application should use stored procedures and views to access the data.
Then only grant access to the procs and views and deny access directly to
the database tables. Abstract this through the use of a database role.

ie.
Create a role 'MyAppRole'
Grant permissions needed on the role in the database.
Add the users you want to the role.

Job done. 

-- 
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602m.html
"scott" <nospamscott@yahoo.com> wrote in message
news:uuqLSM5qEHA.644@tk2msftngp13.phx.gbl...
> Hi
>
> We are writting a VB app that use SQL 2000 as it db. Our old software was
> written in an environment that prevented users from writting to the
database
> tables. How can we employ this in a VB and SQL environment when users need
> to write to tables using the application functions ?
>
> Thanks for any advice.
> Scott
>
>
>
>

Relevant Pages

  • Re: Newbie to security
    ... >Use sp_grantdbaccess to grant access to the database. ... >databases when you are new to security. ... >SQL Server Resource Kit - Implementing Security ...
    (microsoft.public.sqlserver.security)
  • Access to database is enied after power accidentally off
    ... I create database, login, grant access using the following sql script in a ... CREATE DATABASE [Employee] ON ... ... SQL Server Error: 4060 ...
    (microsoft.public.sqlserver.connect)
  • Everytime Power off accidentally, the granted access disappear, wh
    ... I create database, login, grant access using the following sql script in a ... CREATE DATABASE [Employee] ON ... ... SQL Server Error: 4060 ...
    (microsoft.public.sqlserver.security)
  • Access denied after power accidentally off
    ... I create database, login, grant access using the following sql script in a ... CREATE DATABASE [Employee] ON ... ... SQL Server Error: 4060 ...
    (microsoft.public.sqlserver.connect)
  • Re: MS Access DAO -> ADO.NET Migration
    ... William Vaughn ... Microsoft MVP ... Hitchhiker's Guide to Visual Studio and SQL Server ... My migration app works building a SSCE database file with imported data ...
    (microsoft.public.dotnet.framework.adonet)
Loading