July 30, 2010     |
Network Toaster
SQL Security Forums
Note: SQLSecurity.com does not allow nor require registration due to privacy concerns for users. SQLSecurity.com is open and anonymous for all. Please report any abuse or profanity.
Subject: SQL Server Security
Prev Next

Author Messages
Sharon Chapman

09/11/2001 4:29 AM Quote Reply Alert 
I'm using SQL Server 7.0 with MS Access 2000. I have four users: A,B,C,D They have an application named Projects All four users enter their projects into the Projects application. All four users need to see all projects in the Projects application, but user A can only modify the projects he has entered into the Projects Application and user B can only modify the projects he has entered into the Projects Application. If the Manager locks a project, then it can still be seen in the application but certain fields of the project can not be changed. How do I setup SQL Server security for this application?
Chip Andrews

01/01/2001 12:00 AM Quote Reply Alert 
Well, the solution to your problem isn't as simple as flipping a few switches in Enterprise Manager. You need to deny access to all tables and create custom views and stored procedures that restrict data to certain fields and/or rows. For example, when populating a list of projects, you will need to write a stored proc that fetches the data for all rows where the creator of that row is the current user. Once you have programmaticaly covered all of your data access rules you should consider distributing it as an MDE so that the design tools cannot be used to view your modules. Also - don't use attached tables or give users direct access to ANY SQL Server tables.
Jiery

12/11/2001 10:10 PM Quote Reply Alert 
I want to prohibit other users to connect my sql server remotely, only allow local user to connect my sql server, how to do? before I test to disable sql properties->connect->"Allow other SQL server to connect remotely to this sql using RPC" , but no success. pls tell me the reason. pls contact with me, my email is: channel-gr@163.com, thanks.
Jiery

12/11/2001 10:15 PM Quote Reply Alert 
I want to prohibit other users to connect my sql server remotely, only allow local user to connect my sql server, how to do? before I test to disable sql properties->connect->"Allow other SQL server to connect remotely to this sql using RPC" , but no success. pls tell me the reason. pls contact with me, my email is: channel-gr@163.com, thanks.

Forums > Discussions > SQL Server Security > SQL Server Security

Quick Reply
Username:  
Subject:  
Body:
 



ActiveForums 3.6
Copyright 1999 by Chip Andrews   |  Privacy Statement  |  Terms Of Use