Is it possible ?

28 Jul 2005 10:54 PM

marta

Hi

I have users in domain group who use application which uses sqlserve, they
have rights to insert, update, delete. I want some of the members of this
domain group to connect directly to the database using query analyzer but
with right only to read and they still of course can use application and
have full rights.

I can't change application, i don't want to crate another users with
different rights.

I want the same user to have different rights using application and query
analyzer.
Is it possible ? Maybe something similar....

regards
m.

28 Jul 2005 11:03 PM

David Browne

Show quote

"marta" <marta20w***@go2.pl> wrote in message
news:dcbnmq$32b$1@atlantis.news.tpi.pl...
> Hi
>
> I have users in domain group who use application which uses sqlserve, they
> have rights to insert, update, delete. I want some of the members of this
> domain group to connect directly to the database using query analyzer but
> with right only to read and they still of course can use application and
> have full rights.
>
> I can't change application, i don't want to crate another users with
> different rights.
>
> I want the same user to have different rights using application and query
> analyzer.
> Is it possible ? Maybe something similar....
>

Don't multi-post. See response in .server.

David

28 Jul 2005 11:10 PM

Stu

If you are using user rights with an application and not an application
role, then there is no way for the server to differentiate between a
user using product x or product y; it simply sees a request for data
from a user.

However, if your application can be re-tooled to use an application
role instead, then that changes things drastically. Of course, that
limits your applications ability to inherit from Active Directory, so
it may not be a viable solution.

Stu