from msdn: application roles on msdn
an application role database principal enables application run own, user-like permissions. can use application roles enable access specific data users connect through particular application. unlike database roles, application roles contain no members , inactive default. application roles work both authentication modes. application roles enabled using sp_setapprole, requires password. because application roles database-level principal, can access other databases through permissions granted in databases guest. therefore, database in guest has been disabled inaccessible application roles in other databases.
can explain me?
does mean cannot write cross database query refers tables database on same sql server instance if guest account disabled instance?
first, disabling guest account on instance imho bad idea. guest account designed allow users "see" databases (and little more). disabling guest account instance (and consequestially master) stop enumeration of databases may stop otherwise authenticated role connecting, depending on connection string used. can grant application role 1 or more databases , instances , application running under account have access (unless denied in other way) userrs can run applicaion have access via application) way of allowing application t without granting user rights. http://msdn.microsoft.com/en-us/library/aa905195%28v=sql.80%29.aspx instance presume mean sql install instance...?
Comments
Post a Comment