Got stuck at chatper 13 - pg458

Imar · March 28th, 2014, 05:29 AM

Quote:

The best way is to change the security of the database access in the setting properties in Windows to allow all

You should only see this as a temporary solution. Granting Everyone full control is NOT a recommended solution. Instead, you should configure the permissions for the account that accesses that folder only.

On a development machine it may not be that important (although I still recommend to to it properly on a dev box), but on a production server it certainly is!

Cheers,

Imar

desperadoom · April 2nd, 2014, 04:32 PM

HI Imar,

Thanks for your advice. What should we do if we were to have this live on a real server? Would this mess up the coding and make it difficult to get access to the database?

Imar · April 4th, 2014, 12:39 AM

It depends on what you're doing.

For SQL Server, this is typically not an issue. You typically don't use Local DB or SqlExpress on the server so the security permissions in disk are handled during setup of SQL Server and not on a database basis.

For other permissions, like storing uploaded files, you grant permissions to the account used by the web server (usually the App Pool account used by the web site) for the folder you're uploading to. Chapter 19 has all the details.

Cheers,

Imar