Wrox Home  
Search P2P Archive for: Go

  Return to Index  

asp_web_howto thread: Data Access


Message #1 by "Bradley, Peter" <PBradley@u...> on Wed, 19 Feb 2003 12:13:41 -0000
Hi All,

I am accessing corporate data, stored in a SQL Server 7 database, from an
ASP.Net application.  It all works fine except that I can't fetch the data
using any other user except the SQL 7 System Administrator.

I can fetch the data using MSQuery (into Excel or whatever) using any user
who has read access to the database.  So the permissions side of things
appears to be fine.

Does anybody know why the ASP application might be behaving in this way, and
if there is anything I can do about it?  Clearly it's not very secure
accessing the data in this way.


Peter Bradley
Analyst/Programmer
Athrofa Prifysgol Cymru, Caerdydd (UWIC)


Message #2 by "Ken Schaefer" <ken@a...> on Thu, 20 Feb 2003 10:59:08 +1100
Obviously it's not working because something isn't setup correctly.

Cheers
Ken

PS You haven't really provided any information about your actual setup (are
you using SQL Server security/Mixed security or Integrated Security? What is
your connection string? Are you using impersonation in ASP.Net?) or what
errors you are getting, so I can't help much.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From: "Bradley, Peter" <PBradley@u...>
Subject: [asp_web_howto] Data Access


: I am accessing corporate data, stored in a SQL Server 7 database, from an
: ASP.Net application.  It all works fine except that I can't fetch the data
: using any other user except the SQL 7 System Administrator.
:
: I can fetch the data using MSQuery (into Excel or whatever) using any user
: who has read access to the database.  So the permissions side of things
: appears to be fine.
:
: Does anybody know why the ASP application might be behaving in this way,
and
: if there is anything I can do about it?  Clearly it's not very secure
: accessing the data in this way.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Message #3 by "Bradley, Peter" <PBradley@u...> on Thu, 20 Feb 2003 08:50:22 -0000
"Obviously it's not working because something isn't setup correctly"

:) Thank you Ken.  Just what I needed! :)

But seriously I apologise for not giving enough info.  My ignorance as to
what might be needed I'm afraid.

Having checked on your questions, it seems that we are using SQL or NT
authentication (I take it that this is "mixed".

The connection string is:

"server=CIMISWEB; uid=sa; pwd=**********; database=cimisdev";

I'm told we're not using impersonation.

Hope this gives you more to go on, and my apologies again for being less
than explicit last time.


Peter Bradley
Analyst/Programmer
Athrofa Prifysgol Cymru, Caerdydd (UWIC)

 -----Original Message-----
From: 	Ken Schaefer [mailto:ken@a...] 
Sent:	19 February 2003 23:59
To:	ASP Web HowTo
Subject:	[asp_web_howto] Re: Data Access

Obviously it's not working because something isn't setup correctly.

Cheers
Ken

PS You haven't really provided any information about your actual setup (are
you using SQL Server security/Mixed security or Integrated Security? What is
your connection string? Are you using impersonation in ASP.Net?) or what
errors you are getting, so I can't help much.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From: "Bradley, Peter" <PBradley@u...>
Subject: [asp_web_howto] Data Access


: I am accessing corporate data, stored in a SQL Server 7 database, from an
: ASP.Net application.  It all works fine except that I can't fetch the data
: using any other user except the SQL 7 System Administrator.
:
: I can fetch the data using MSQuery (into Excel or whatever) using any user
: who has read access to the database.  So the permissions side of things
: appears to be fine.
:
: Does anybody know why the ASP application might be behaving in this way,
and
: if there is anything I can do about it?  Clearly it's not very secure
: accessing the data in this way.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



  Return to Index