Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Development (2000)
 db_owner details in connection string

Author  Topic 

hasanali00
Posting Yak Master

207 Posts

Posted - 2004-11-23 : 08:56:22
I have an account on a hosted SQL server. The account details provide to me is an 'db_owner', so I have full access to my DB.

I use this account details in an web application (asp.net app) to connect to my DB and perform Select, Insert ... and stored procedures.

My question is how dangerous is it to use 'db_owner' details in an connection string. Remember, I cannot create additional users for my DB.

Should I just use 'db_owner' details to connect to my DB or is there alternative appraoch.

regadrs

tuenty
Constraint Violating Yak Guru

278 Posts

Posted - 2004-11-23 : 11:29:54
try using only SP and read this article http://www.securiteam.com/securityreviews/5DP0N1P76E.html

*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*
A candle loses nothing by lighting another candle
Go to Top of Page
   

- Advertisement -