469,133 Members | 1,015 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 469,133 developers. It's quick & easy.

preventing direct access to database

I am using vb.net and SQL Server 2000. Hopefully i will soon be using
VB.net 2005.

I would like to prevent users from having direct access to a SQL Server
database, and require them to access the database through an application.

Application roles seem like a good solution, but I read that I shouldn't use
connection pooling with application roles.

I don't think I want to sacrifice connection pooling, but I need to secure
the database.

What is the best way to accomplish this?

Thanks
Bill

Dec 13 '05 #1
2 1200
Can you password protect your database?
--
Dennis in Houston
"bill" wrote:
I am using vb.net and SQL Server 2000. Hopefully i will soon be using
VB.net 2005.

I would like to prevent users from having direct access to a SQL Server
database, and require them to access the database through an application.

Application roles seem like a good solution, but I read that I shouldn't use
connection pooling with application roles.

I don't think I want to sacrifice connection pooling, but I need to secure
the database.

What is the best way to accomplish this?

Thanks
Bill

Dec 13 '05 #2
One technique often used with windows security is to not allow users
any rights at all on tables or views but instead limit them completely
to stored procedures. The idea is that business rules etc are enforced
by these stored procedures.

You could alternatively use SQL server security and have a log in and
password hard coded into your application. This is not usually
considered best practice AFAIK.

Dec 13 '05 #3

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

11 posts views Thread by EoRaptor | last post: by
9 posts views Thread by WalterR | last post: by
2 posts views Thread by aboesteanu | last post: by
reply views Thread by zhoujie | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.