Databases
StackOverflow2013
Postsdbo
PO
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>SQL Server itself has means to store Windows credentials, see <a href="http://msdn.microsoft.com/en-us/library/ms189522.aspx" rel="nofollow noreferrer">CREATE CREDENTIAL</a>:</p> <blockquote> <p>A credential is a record that contains the authentication information that is required to connect to a resource outside SQL Server. Most credentials include a Windows user and password.</p> </blockquote> <p>But storing user credentials in the application, in any form, is <strong>always</strong> a bad idea. For one, they go out of sync when the user changes the password. Second, impersonating users to access resources is <strong>never</strong> the correct solution. The correct solution is to actually set up group membership and properly define access control lists on the resources.</p> <p>The only correct scenarios for accessing resources are:</p> <ul> <li>as the user running the application, ie. the normal run-of-the-mill use case</li> <li>as a service that impersonates the connected user, which is done by obtaining a remote identity token from an SSPI authentication, like the <a href="http://msdn.microsoft.com/en-US/library/system.net.security.negotiatestream.remoteidentity%28v=VS.80%29.aspx" rel="nofollow noreferrer">NegotiateStream.RemoteIdentity</a></li> </ul>
    singulars
    1. This table or related slice is empty.
    1. POStoring And Using Microsoft User Account Credentials in SQL Server 2008 database
      singulars
      1. PTQuestion
    1. PTAnswer
    1. This table or related slice is empty.
    1. USRemus Rusanu
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. POStoring And Using Microsoft User Account Credentials in SQL Server 2008 database
      singulars
      1. PTQuestion
    1. This table or related slice is empty.
    1. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTAcceptedByOriginator
    1. COThanking all of you for your answers, I think Windows Authenication will do nicely. If I can bug you for a little more info, the end-goal of this app is to have many users with different permissions(user group dependant). I'm understanding now, that I should allow the end-user application to access the specified network share, and specify user/group specific permissions in their Windows Account settings. Correct? Also, where do you think I should store application-specific permissions? Am I able to somehow specify these permissions the same way I would other windows permissions?
      singulars
      1. PO
      1. USinstantmusic
    2. COYou can allow access resources for specific users/groups. You can allow access to your application to specific users/group. What you cannot do is you cannot allow access to *resources* for a specific *application*. There simply isn't any infrastructure that allows you to authenticate *applications, as opposed to users. To allow access to a resource for an user or a group modify the resource ACL (Access Control List), either from the UI shell or by using a tool like cacls.exe.
      singulars
      1. PO
      1. USRemus Rusanu
    3. COAhh I'm sorry, I think I might have misworded that slightly. I meant to say that the application will access the folder directly, what it can/cannot do to the folder will be dictated by the user account that is logged in and using the program. My next concern is custom application permissions(User has access to view this form/grid, user can add/edit/delete records from this grid, etc) but just some quick reading around it looks like I might have to store app-specific permissions in my DB, and map users/groups to app-specific permissions manually. That about right? I'm wide open for tips.
      singulars
      1. PO
      1. USinstantmusic
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload