SQL Server :: Create Least Privileged Account?
Jan 24, 2011
my client is more concern about data security. so they want to follow all sql server security policies. As part of sql server security policies we should not give full permission for sql server login, we should give only execute permission for all stored procedures, and functions. To follow the above condtions we created a sql server user with readonly permission and this works fine only when stored procedures dont not have temporary table (#temp tables). if any stored procedure contains temporary table creations, we get an error saying "access denied for so on so tamporary table name'. so is there any way to fix this issue without giving select permission for temporary tables.
View 1 Replies
Similar Messages:
Mar 9, 2011
I am logged in as the administrator when I installed an application named pdflatex.exe on my server. This application works as a converter from LaTeX input file to Pdf file. I host an Asp.net MVC 3 application running under an Application Pool Identity with Load User Profile = True. The Asp.net MVC 3 code contains a code that executes pdflatex.exe using System.Diagnostic.Process instance as follows:
Process p = new Process();
p.EnableRaisingEvents = true;
p.Exited += new EventHandler(p_Exited);
p.StartInfo.Arguments = "-interaction=nonstopmode " + inputpath;
p.StartInfo.WorkingDirectory = @"c:mydomain.comworking";
p.StartInfo.UseShellExecute = false;
p.StartInfo.FileName = "pdflatex.exe";
p.Start();
p.WaitForExit();
From the scenario above, the web application runs under a restricted acount but it executes an external application under a default account that I don't know. Can an application running under a less privileged account start a process executing another application under an administrative account?
View 2 Replies
Jun 27, 2010
I need to create Email account using my domain .. I have registered domain i can create unlimited email accounts from my server .. as of now i am using asp.net 2005 and C# . now my questions how to create email using C# ???
for eg : www.mydomain.com
email like : emailid@mydomain.com
View 1 Replies
Sep 24, 2010
I want to create ftp account in plesk using asp.net so that whenevrever user register in site can have an ftp account with his username and password. Please help me with what approach to follow (code example) and what api's does asp.net include for this...??
View 3 Replies
May 7, 2010
I wondered if it is possible to place a second CreateUserWizard in my web application. Here's the scenario:
The application is a team selection site for coaches. Each coach registers and create a profile. Then , they must create a pool of players (or they have no team). When the coach registers, (s)he is assigned to the role of "Coach" in the ASPNETDB.MDF. In order to create a pool of players, the coach must register an account for each player (or ask them to do so themselves). The players then have an account with limited permissions (they can go to the forum and leave comments, or simply just check if they have been selected, etc).
Therefore my question is can I place another wizard to create a player (stored as role "Player" in the ASPNETDB.MDF), on a page dedicated to adding players, which will only be accessible to coaches?Or is there another way to implement this? It must be said at this point that players can only be registered if a coach already has an account on the site; i.e. if their team is existant on the site. This is to ensure that only members of teams can use the site; i.e. a single person cannot use the forum for example, unless they are part of a team, as a coach or a player.
View 2 Replies
Sep 16, 2010
i have this code to create a local windows user
public static bool CreateLocalWindowsAccount(string username, string password, string displayName, string description, bool canChangePwd, bool pwdExpires)
{
[code]...
View 1 Replies
May 19, 2010
i want to create application that register host and domain in pleskany guya have sample? or source code? or documentation
View 1 Replies
Jan 14, 2011
I have a web application. This application needs to perform a search on folders located on 2 different machines. I can use impersonation for this. But -
a. I don't want to use network service account
b. I want to impersonate just the search part of the code.
c. Specifying encrypted user name / password in web.config is one option. But this would be the last option.
Can I use a custom service account for the application pool for this? If yes, then how to impersonate a specific part of code using this?
View 3 Replies
Oct 21, 2010
On admin side how to create first secure admin account when there is no users/admin exists without manuall entry ?On any website how we can create Super admin account who will handle all the things? Except the entry in db manually. I c# or vb.net
View 1 Replies
Aug 25, 2010
I need to create individual account for a big group of people (around 200) from an Excel spreadsheet. What is the best practice? It will take too much time to create account using web form. I think there must be a way to do it. I tried to use Stored procedures created by ASP.NET.
View 2 Replies
Mar 12, 2010
I am setting up a website, and I want to set up a way for select people to be able to create an account. What I want to do is make a field for a security code, that when entered, will take them to the create new user page. I do not want just everyone to be able to set up a user account, as it would expose wholesale prices to the general public.
For example, Business X wants to set up a wholesale account. They contact the business owner, and when the owner verifies the business is legitimate, she can give them the security code to enter. Once the correct security code is entered, it will then take them to the account set up page.
I have VWDEE2008, and have used the Administer Website tool, and am familiar with using that.
View 1 Replies
Sep 18, 2010
i want asp.net script to create new email account. i mean there should b registration form like gmail or yahoomail and my user can create their own account under my domain name.
View 1 Replies
Sep 22, 2010
I have developed a web application in which i manage details of different companies,,,for that i as admin add companies and their details in my database...right now my role is administrator in my web application
The problem is everytime i have to update company details and other information
I want companies to update their own information...
so how i can create a role and create usernames for companies so that they can login to their individual accounts and update the company information by themselves ?
One important thing of my requirement: One company can have multiple usernames accounts..
View 5 Replies
Oct 30, 2010
I have a webservice that a developer can use to create a user account, apart of the create user account form, it requires an input of the user's "Postal Address"The Postal address has "Country State Id"Normally, I would provide a list for everything else, but when it comes to country state list it contains thousands and thousands of states/regions and its too much to list in a API specification document.
So my question is, 1) do you create a web service for the developer to retrieve the country state id?
or 2) provide the developer with a database file, with the list of country state id?
View 1 Replies
Sep 12, 2010
I have an application which is installed on local pc and is using SQL db. It is a client management system where I want to add capability to register new clients and give them access to my web site which is sharing the same SQL database with local application.
At the moment clients can register on the web site and I have ASP.NET authorisation system set up with aspnetdb_user, aspnetdb_membership and etc tables. But sometimes it happens that I need to register clients on my local application on PC and ideally would like that registration to create online account for the client as well. Then I want to be able to send him user id and password by email and let him know that he has been registered in my database and online account is ready for him as well.
Basically I want to have full synchronization between asp.net membership service and local application through SQL db. As I said both online and local apps are shareing the same SQL database. what would be the best practice to implement it.
View 1 Replies
Feb 6, 2010
[Code]....
I used this above sample to send Verification link but it didn't work ! it gives the error on this line;
[Code]....
View 5 Replies
Aug 5, 2010
Is it possible to insert a connection string into a web.config file if it isnt there?Would this work?The connection string is for a APS.NET user login and create account database.
View 3 Replies
Oct 14, 2010
We are coding an intranet site using .net DirectoryServices and AccountManagement to create a computer account in Active Directory with access rules allowing a specific user to add the computer to the domain. Has anyone had any success using the AccessRuleFactory method to set access rules? I'm stumped with a few aspects. So far, this is what we have...Using AccountManagement, we can easily add the computer:
[Code]....
Next we get the DirectoryEntry and ObjectSecurity for the computer. Also dim the ACE object:
[Code]....
Set the userAccountControl:
[Code]....
Here's where we're having problems:
[Code]....
The IdentityReference needs to be the trustee for the computer - how can we get this using AccountManagement and/or DirectoryServices?And I'm not sure what to use for the Inherited Object guid?
Here's the complete vbscript we're trying to convert:
[Code]....
View 1 Replies
Oct 7, 2010
I've got an ASP.NET website, and its connecting to a database I've created on SQL Server 2k8 and I'm using windows integrated security on my connection string between asp.net and SQL Server. What account should I give permissions to my database inside SQL Server? Should I give NT AUTHORITYNETWORK SERVICE permission to my database? Right now, I right clicked the network service account, and went to properties, and then I checked my database under "users mapped to this login:" and then in the "database role membership for" diaglogue I then selected public and db_owner. Is that right?
View 1 Replies
Jul 28, 2014
I have a web app Which Uses Forms Authentication.
One thing that we want to be able to do on Support is login to a specific users account Via our admin account.
We are using the standard asp.net membership authentication.
The idea would be for the support technition to be able to login using credentials like admin(<Troubled User>) using the Admin Account password
We are using a a Standard ASP.Login Control
The real Issue is that the Me.Page.User.Identity.Name is set to the value on the CtlLogin.Username Property. I need it to be the the Support Login?
Login Control
Code:
<asp:Login ID="ctlLogin" runat="server" DisplayRememberMe="False" Font-Names="Arial Rounded MT Bold" Font-Size="12pt" ForeColor="Black"
MembershipProvider="MembershipProvider" Width="100%" TitleText="" UserNameLabelText="User" VisibleWhenLoggedIn="False" RememberMeSet="True"
PasswordLabelText="Password" EnableTheming="False" Height="35px" >
[Code] ....
Validate User Script
Code:
Dim objstrSupUser As String = ""
'Load the user from the membership provider
Dim strUserName As String = ctlLogin.UserName
If ctlLogin.UserName.IndexOf("(") > 0 Then
objstrSupUser = Regex.Match(strUserName, "(([^)]*))").Groups(1).Value
[Code] ....
View 5 Replies
Feb 2, 2011
Do I just need to make a field for account type in my user account table? In a technical way, if(account type = admin) then the account would log as admin; otherwise, a user with less privileges.
View 7 Replies
Oct 15, 2010
I have an ASP.NET page where at the top of the page is a search box. There are 2 text boxes - one is an autocomplete extender for the Name on a database, and one is just inputting the ID.The page features DetailsViews and GridViews primarily, and even when no account has been searched for, these display blank data which is not ideal. I sort of fixed this by using if (IsPostBack), encasing the elements in a placeholder and setting it to visible only if the page ispostback. But this doesn't cover if the user types in an incorrect ID.
Also, some accounts have huge amounts of data inside the GridView's. I had an issue where because I have no way of detecting when a data source's rows has changed, I end up binding whenever the page loads (Page_Load method). I've come to realise this is simply very bad - there are lots of times when the user can click various things in the page and have the page postback, and it takes an eternity to load each time I click something for accounts with lots of data.Anyway, my question is essentially two-fold but I have a feeling the solution will be similar:1: How can I detect when there are no accounts returned when searching, and disable the Grids/Detailsviews and show an error message?2: How can I figure out when the user searches for another account and only rebind the grids after that has happened?
View 1 Replies
Nov 12, 2010
I have use the mvc 2 web site template and I would like to attach
A user db that I have already created
In my web config file I have change the connection string to this"
[Code]....
When I'm tring to register I'm getting this error :
Login failed for user ''. Description: An unhandled exception occurred during the execution of the current web request. review the stack trace for more information about the error and where it originated in the code. Exception Details: System.Data.SqlClient.SqlException: Login failed for user ''.Source Error:
[Code]....
I have set a break point in line 127 and I can clearly see that is getting the data (username ,password ,email) What is wrong( with the contion string)?
View 2 Replies
Mar 8, 2011
I have an ASP.NET web app where I use an ado sql connection to connect to a database on a SQL Server. The ado connection string is provided with a user login that has sufficient rights to read/write to the database. I originally pushed out the web app in its own IIS web site, using its own application pool and everything worked fine.
However, I am now trying to include the web app under an already existing web site. Everything seemed to work fine until I tried any functionality that called for an INSERT or UPDATE to the database. It turns out the user connecting to the DB didn't have sufficient permissions. Finding this strange, I did some research and found a forum post that suggested the IIS Web Site service account needed read/write permissions in the SQL database in order for an app to perform INSERT/UPDATE. Is this true?
I tested it out, and yes, indeed it worked, only with the Application Pool Identity account. The deatails of my scenario are as follows:
The web app's first IIS Web Site had an application pool Identity that ran under NETWORK SERVICE, which already had a login for SQL SERVER The already existing web site's application pool Identity runs under a domain account. This site already runs another web app that connects to the same database using LINQ (developed by someone else). I am relatively new to web development and am more familiar with ADO, so that is the route I chose.The domain account mentioned above formerly had no SQL Server login/user mapping. I set it up as a dbowner, and viola, the new web app worked under the existing web site.
While I found a way for it to work, we would rather not create a SQL login for this Identity account. We want the login provided in the web app's ADO SqlConnection to be the one to actually connect, because isn't that the point of it?
View 1 Replies
Mar 1, 2010
In our database we have an SQL server account that has the correct roles to access some of the databases.All of our PC and Servers are in domain using Windows Account. Now there is ASP.NET web application, we want the users in the domain to browser some data in the sql server. But we do not want to grant direct permission to every person, so is it possible to connect to sql server and run some T-SQL without granting permission to users using one specify account?
View 3 Replies
