Wednesday, May 1, 2013

[SQL 2012] Creating a least-privelege SQL Server 2012 user/login for running ASP.net parameterised queries

[SQL 2012] Creating a least-privelege SQL Server 2012 user/login for running ASP.net parameterised queries


Creating a least-privelege SQL Server 2012 user/login for running ASP.net parameterised queries

Posted: 01 May 2013 02:11 AM PDT

Hello,I'm developing an ASP.net website which will interact with an SQL Server 2012 database via parameterised queries. I've got the stored procedures and ASP.net covered, but I'm stuck on what's required on the user/login side in SQL Server 2012. Now I've worked with this setup once before but didn't have to worry about that side of things as a DBA colleague took care of it while I focussed purely on the coding. Unemployed and no DBA now though.From memory I thought I needed to create a user with execute permissions so I attempted that(via security > users> new user) but was prompted for "user type", "login name" and a "default schema". I'm really not sure what to choose for those. I tried googling, but ended up horribly chasing my tail (for a nice change) ... and here I am.I have half a feeling that "login name" is not required if the database is set to "windows authentication". If so I'd guess I need to select "SQL user without login", and just create a user with execute permissions. But that's a horrible amount of compound guesswork and I really don't want to blindly fudge this crucial part of the website.So I'd appreciate some advice on that if anyone knows.In summary I would like to know whether I need to create a login, a user, both, and, if possible, what settings to choose in the create dialogues.Thank you very much,David.

DTC name on Windows Server 2012/SQL Server 2012 Cluster

Posted: 30 Apr 2013 03:53 AM PDT

Hi All,Does anyone know how to change the name of the Distributed Transaction Coordinator on a Windows Server 2012 Cluster? You used to be able to right-click and rename, but that option is not there now. The name is fixed at "New Distributed Transaction Coordinator".Thanks.Tim

No comments:

Post a Comment

Search This Blog