Sql 2k users for web access permissions

  • Thread starter Thread starter RA
  • Start date Start date
R

RA

Hi,

For security reason what type of user in the sql server should I create for
my web site.
The web site is getting user input information and saves it in the database
and let the user to download a file.
Should I restrict the account being used by the aspx ado connection?
Currently I am using the admin account. What should I watch for ?


Thanks,
Ronen
 
Hi RA,

In short words:
I think you should create stored procedures for every action you need to
prevent direct table access.
The user should be allowed the minimum possible range of operations needed.
And using administrator account is certainly not the best way :)
 
Back
Top