×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

MSSQL 2005 - limit db access to my app only

MSSQL 2005 - limit db access to my app only

MSSQL 2005 - limit db access to my app only

(OP)
Hi

I'm new to all this stuff so I was just hoping someone could point me into the right direction.

I am writing an app which will hold some sensitive information including names, addresses, peoples salary etc. The users will connect to the database via an ODBC connection on their local computer.

What I need to know is there anyway I can make SQL server only accept connections (for that particular database) that come from the application I am writing?

TIA,

Arms

RE: MSSQL 2005 - limit db access to my app only

You can set the SQL security up so that only accounts for this application have access to the database; you can also use the built in encryption functionality in SQL 2005 to secure the personal data.

As a suggestion, you could possibly use a DSN less connection to connect to your server from your application, which means there is less of an easy way for somebody else to try and get into your app via other means.
For example:

Provider=SQLOLEDB;Data Source=server;Initial Catalog=database name;User ID=username;Pwd=password;Network Library=DBMSSOCN;APP=Your Application Name

Network Library=dbmssocn means "Connect over TCP/IP" but if it is running on the same host as your client, then you could change this to connect via shared memory.
See http://www.connectionstrings.com/ to learn more about writing database connection strings.

John

RE: MSSQL 2005 - limit db access to my app only

Also, write all of your code that accesses the data in stored procs (and do not ever use dynamic SQL). Then do not give rights to the tables and views to anyone except the admin. Make all the user access rights at the stored proc level and then they can only do what the stored proc does.

"NOTHING is more important in a database than integrity." ESquared

RE: MSSQL 2005 - limit db access to my app only

(OP)
thanks very much guys, many hours of fun to look forward to ;)

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login


Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close