How to authorize a user only through an application

Hello,
we use Windows Authentification with SQL Server 2005 but we want our users
to access to the database only with an application. We don't want our users
to access to the database with an other application.
What are the possibilities ? Does SQL Server recognize an application with a
signature or something like that ?
Thanks
Best regardsCheck in Books On Line about the use of an 'Application Role'.
An 'Application Role' is a special type of login that may work for your
situation.
Arnie Rowland, Ph.D.
Westwood Consulting, Inc
Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous
"Jojonews" <Jojonews@.discussions.microsoft.com> wrote in message
news:46345D65-7404-40EE-BECE-BED51AEC45B1@.microsoft.com...
> Hello,
> we use Windows Authentification with SQL Server 2005 but we want our users
> to access to the database only with an application. We don't want our
> users
> to access to the database with an other application.
> What are the possibilities ? Does SQL Server recognize an application with
> a
> signature or something like that ?
> Thanks
> Best regardssql

how to AttachDbFilename in application's directory

How can I use AttachDbFilename in DbNameDataSet.xsd to access the database in the same directory as the exe file (i.e. the application using it)?You need to specificy AttachDBFilename=True in the connection string of the SQL Connectionsql

how to aduit database access?

background: sql2k on win2k3 server
i have an application which no longer has further development on it (so
that means no changes will be done thru front end interface of the
application). but new business policies require the aduit for database
access, such as who accesses the database at when and from where and so
on...(even for just read a table). I had expereinces writing triggers
to track inserts and edits, but not read only access.
is there a way to do so? some examples would be great! thank you.Of course updates and inserts can be easily audited with triggers. However,
if you attempt to audit every occurrance that every user reads from the
database, the size of your audit history will very soon exceed the size of
your database. For example, if a user queries 1000 records from a table,
will you make note of each individual record accessed or just the fact that
they accessed the table? These type events are perhaps better audited at the
application level. For example, User A looked at Purchase Order 122 @.
date/time.
"=== Steve L ===" <steve.lin@.powells.com> wrote in message
news:1117216416.350834.242620@.g47g2000cwa.googlegroups.com...
>
> background: sql2k on win2k3 server
> i have an application which no longer has further development on it (so
> that means no changes will be done thru front end interface of the
> application). but new business policies require the aduit for database
> access, such as who accesses the database at when and from where and so
> on...(even for just read a table). I had expereinces writing triggers
> to track inserts and edits, but not read only access.
> is there a way to do so? some examples would be great! thank you.
>|||"=== Steve L ===" <steve.lin@.powells.com> wrote in message
news:1117216416.350834.242620@.g47g2000cwa.googlegroups.com...
>
> background: sql2k on win2k3 server
> i have an application which no longer has further development on it (so
> that means no changes will be done thru front end interface of the
> application). but new business policies require the aduit for database
> access, such as who accesses the database at when and from where and so
> on...(even for just read a table). I had expereinces writing triggers
> to track inserts and edits, but not read only access.
> is there a way to do so? some examples would be great! thank you.
>
Here's an article discussing auditing in sql server 2k:
http://www.microsoft.com/technet/se...r/sql2kaud.mspx
In particular, the last section speaks to using server-side traces for
auditing. This is particularly attractive in situation where you need fine
grained control over the which activity should be captured.|||thanks for the reply.
i'm only interested in table access audit level, not down to record
level, that will be to much as you indicated. I also agreed that this
kind of audit can easily be done on the app level, but as i said, there
will be no more app development! that's why i'm looking into database
side solution.|||Using SQL Profiler, you can configure a trace events such as object
references or execution of a stored procedure, and the columns returned can
include the user id. The output of the trace can be sent to a database table
or file, and you will need to tweak it so that it returns only the
information you really need. Perhaps you can implement a scheduled job that
periodically purges the table to keep it from getting too large. Of course
SQL Profiler will need be always running for this to work.
"=== Steve L ===" <steve.lin@.powells.com> wrote in message
news:1117220601.221951.53120@.g44g2000cwa.googlegroups.com...
> thanks for the reply.
> i'm only interested in table access audit level, not down to record
> level, that will be to much as you indicated. I also agreed that this
> kind of audit can easily be done on the app level, but as i said, there
> will be no more app development! that's why i'm looking into database
> side solution.
>|||Tracking database activity
http://www.microsoft.com/technet/se...r/sql2kaud.mspx
--
Programmer
"=== Steve L ===" wrote:

>
> background: sql2k on win2k3 server
> i have an application which no longer has further development on it (so
> that means no changes will be done thru front end interface of the
> application). but new business policies require the aduit for database
> access, such as who accesses the database at when and from where and so
> on...(even for just read a table). I had expereinces writing triggers
> to track inserts and edits, but not read only access.
> is there a way to do so? some examples would be great! thank you.
>|||If you are willing to look at 3rd party tools and have the budget there are
several auditing solutions available. www.lumigent.com is one for example.
"=== Steve L ===" <steve.lin@.powells.com> wrote in message
news:1117216416.350834.242620@.g47g2000cwa.googlegroups.com...
>
> background: sql2k on win2k3 server
> i have an application which no longer has further development on it (so
> that means no changes will be done thru front end interface of the
> application). but new business policies require the aduit for database
> access, such as who accesses the database at when and from where and so
> on...(even for just read a table). I had expereinces writing triggers
> to track inserts and edits, but not read only access.
> is there a way to do so? some examples would be great! thank you.
>sql

How to add SQL 3.5 in Visual Studio prerequisites ?

Hi!

I want to deploy an application that require the SQL Server Compact Edition 3.5 to be installed..... and I want to deploy my application with ClickOnce!

But, the problem is that I can't select "SQL Server Compact Edition" in the prerequisites of the Visual Studio Project properties... ?

Do you have a solution ?

thx!

SQL Server Compact 3.5 pre-requisite shows up in Visual Studio 2008 Beta 2. The Beta 2 can be downloaded from

http://msdn2.microsoft.com/en-us/vstudio/aa700831.aspx

Regards

Ambrish

How to add SQL 3.5 in Visual Studio prerequisites ?

Hi!

I want to deploy an application that require the SQL Server Compact Edition 3.5 to be installed..... and I want to deploy my application with ClickOnce!

But, the problem is that I can't select "SQL Server Compact Edition" in the prerequisites of the Visual Studio Project properties... ?

Do you have a solution ?

thx!

SQL Server Compact 3.5 pre-requisite shows up in Visual Studio 2008 Beta 2. The Beta 2 can be downloaded from

http://msdn2.microsoft.com/en-us/vstudio/aa700831.aspx

Regards

Ambrish

How to Add Columns and Use Them at Run Time using VB 2005

In order to allow my customers to use their existing data and install updated application, I want to be able to add columns to existing CE tables at startup time, and allow the user to enter data into the new column(s) immediately. I used the ALTER TABLE command as shown in the example below:

cmd.CommandText = "ALTER TABLE tblStores ADD dtDemoDate datetime, dtDemoMode int"

cmdexe = cmd.ExecuteNonQuery()

To add the column, But this does not set the columns in the attached dataset. The program sees the columns and data is able to be added, but is not then in the underlying table? What else do I need to do?

Thank you - b2bMan

You must update the dataset to fit the new schema. Distribute an application update together with the code to update the schema.

How to accomodate

I have a user (also my boss) who wants the system to work a specific way
which amounts to this:
1) ability to create an application as a developer
2) ability to deploy that application anywhere on any server in the network
3) ability to not need to worry about user permissions
I don't know how to explain how Windows Authentication works well enough -
in other words, in a syllable or so, that explains why this may not be
possible given the state of the various user groups and the concept of least
permission across a network.
We use groups and give read/write access to groups. When groups access
procedures, occasionally there are problems, particularly if the newly
created procedure is used by a group user and the procedure has not been
added to the role that allows access to the procedure.
Is there a command that will easily place all new procedures into the user
procedure role that doesn't involve putting every procedure into the role
(there are some we don't want the users to run)?
Regards,
JamieActually, posting in the wrong group here. This is a question for VS 2005
Net Framework deployment.
--
Regards,
Jamie
"thejamie" wrote:

> I have a user (also my boss) who wants the system to work a specific way
> which amounts to this:
> 1) ability to create an application as a developer
> 2) ability to deploy that application anywhere on any server in the networ
k
> 3) ability to not need to worry about user permissions
> I don't know how to explain how Windows Authentication works well enough -
> in other words, in a syllable or so, that explains why this may not be
> possible given the state of the various user groups and the concept of lea
st
> permission across a network.
> We use groups and give read/write access to groups. When groups access
> procedures, occasionally there are problems, particularly if the newly
> created procedure is used by a group user and the procedure has not been
> added to the role that allows access to the procedure.
> Is there a command that will easily place all new procedures into the user
> procedure role that doesn't involve putting every procedure into the role
> (there are some we don't want the users to run)?
> --
> Regards,
> Jamie

How to accomodate

I have a user (also my boss) who wants the system to work a specific way
which amounts to this:
1) ability to create an application as a developer
2) ability to deploy that application anywhere on any server in the network
3) ability to not need to worry about user permissions
I don't know how to explain how Windows Authentication works well enough -
in other words, in a syllable or so, that explains why this may not be
possible given the state of the various user groups and the concept of least
permission across a network.
We use groups and give read/write access to groups. When groups access
procedures, occasionally there are problems, particularly if the newly
created procedure is used by a group user and the procedure has not been
added to the role that allows access to the procedure.
Is there a command that will easily place all new procedures into the user
procedure role that doesn't involve putting every procedure into the role
(there are some we don't want the users to run)?
Regards,
Jamie
Actually, posting in the wrong group here. This is a question for VS 2005
Net Framework deployment.
Regards,
Jamie
"thejamie" wrote:

> I have a user (also my boss) who wants the system to work a specific way
> which amounts to this:
> 1) ability to create an application as a developer
> 2) ability to deploy that application anywhere on any server in the network
> 3) ability to not need to worry about user permissions
> I don't know how to explain how Windows Authentication works well enough -
> in other words, in a syllable or so, that explains why this may not be
> possible given the state of the various user groups and the concept of least
> permission across a network.
> We use groups and give read/write access to groups. When groups access
> procedures, occasionally there are problems, particularly if the newly
> created procedure is used by a group user and the procedure has not been
> added to the role that allows access to the procedure.
> Is there a command that will easily place all new procedures into the user
> procedure role that doesn't involve putting every procedure into the role
> (there are some we don't want the users to run)?
> --
> Regards,
> Jamie

How to accomodate

I have a user (also my boss) who wants the system to work a specific way
which amounts to this:
1) ability to create an application as a developer
2) ability to deploy that application anywhere on any server in the network
3) ability to not need to worry about user permissions
I don't know how to explain how Windows Authentication works well enough -
in other words, in a syllable or so, that explains why this may not be
possible given the state of the various user groups and the concept of least
permission across a network.
We use groups and give read/write access to groups. When groups access
procedures, occasionally there are problems, particularly if the newly
created procedure is used by a group user and the procedure has not been
added to the role that allows access to the procedure.
Is there a command that will easily place all new procedures into the user
procedure role that doesn't involve putting every procedure into the role
(there are some we don't want the users to run)?
--
Regards,
JamieActually, posting in the wrong group here. This is a question for VS 2005
Net Framework deployment.
--
Regards,
Jamie
"thejamie" wrote:
> I have a user (also my boss) who wants the system to work a specific way
> which amounts to this:
> 1) ability to create an application as a developer
> 2) ability to deploy that application anywhere on any server in the network
> 3) ability to not need to worry about user permissions
> I don't know how to explain how Windows Authentication works well enough -
> in other words, in a syllable or so, that explains why this may not be
> possible given the state of the various user groups and the concept of least
> permission across a network.
> We use groups and give read/write access to groups. When groups access
> procedures, occasionally there are problems, particularly if the newly
> created procedure is used by a group user and the procedure has not been
> added to the role that allows access to the procedure.
> Is there a command that will easily place all new procedures into the user
> procedure role that doesn't involve putting every procedure into the role
> (there are some we don't want the users to run)?
> --
> Regards,
> Jamie