Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

odbc connection

Status
Not open for further replies.
terry712

terry712

Technical User
Oct 1, 2002
2,175
GB
sorry afraid my sql knowledge sucks

i have a sql dbase on a 2000 server - a developer wants access to the db for reporting purposes

i'm not keen for him to get physical file access to the box

how to i setup some kind of odbc connection to the db
or can i just give him the sa password for the db

the box hosts about 5 dbases but this one has a seperate sa password
 
Sort by date Sort by votes
Never ever give anyone the sa password. No application should ever use the sa password to connect to the server. That grants a user or application way to much access to the server.

Create the developer a user account using his domain account, and give him the mininum rights that he needs within the server to do his job. The most rights that i would give him is the "Database Creator" server role. That role will allow him to create databases, but not make changes to the system.

He should not be an admin on the server's os at all. Infact he needs no rights to the server's os. The only info that you should need to give him is the name of the server, and tell him to use a trusted connection to connect.

He will probably ask for an account for his applications to use. This will need to be a SQL Account, and it should have the least rights possible. In a perfect system the application account should only have the right to execute stored procedures, and nothing else. It shouldn't be able to modify system settings, and it shouldn't be able to create databases. And an applicaiton account should never ever have sysadmin rights.

If you have any questions let me know.

Denny

--Anything is possible. All it takes is a little research. (Me)

[noevil]
(My very old site)
 
Upvote 0 Downvote
he actually accessing the db just now through the front end - so he does have a sql account for this db
so i assume i can just modify this account .

the server has no users accounts on it and it's not in a domain. pure standalone - a lot of the ports are switched off - ie you cant net use to it etc - just name pipe connections


 
Upvote 0 Downvote
I would just modify the account that he is already using.

Denny

--Anything is possible. All it takes is a little research. (Me)

[noevil]
(My very old site)
 
Upvote 0 Downvote
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top