Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
User for web service
Message
From
20/12/2012 11:34:47
 
 
To
20/12/2012 11:24:13
General information
Forum:
Microsoft SQL Server
Category:
Security
Miscellaneous
Thread ID:
01560281
Message ID:
01560304
Views:
36
Likes (1)
>>>>>Hi
>>>>>
>>>>>I want to create a specific user to be used by a web service so any amendments by the web service in the database are tagged with that userid. (at the moment everything is going under sa)
>>>>>
>>>>>When I run a create user command I get an error.
>>>>>
>>>>>Windows NT user or group 'DEV01\Test.User' not found. Check the name again.
>>>>>
>>>>>What do I need to do (or a link to a good summary) to make this happen.
>>>>
>>>>Do you mean that you just want a single user account for all hits on the web service or that you want to narrow it down to the specific user who is accessing the service ?
>>>
>>>Hi Viv
>>>
>>>I would like a single account for all hits on the web service to differentiate changes to the database via the web service from changes via the in house system
>>
>>Then I guess the answer depends on how IIS (I'm assuming that's what is hosting the web service) is configured and how much control you have over it. Some options:
>>
>>1. Configure the relevant application pool to use a specific user.
>>2. If possible use a nested web.config to specify the user
>>3. Code the relevant user impersonation into the web service
>>
>>See http://support.microsoft.com/kb/306158?wa=wsignin1.0 for examples of the two latter approaches....
>
>Thanks Vicv
>
>any idea what craig was getting at ?

Hi Nkolas :-}

Other than the obvious risks of allowing anonymous access (DOS attack) no....
Of course I'm assuming SQL commands cannot be directly acted on by the web service....
Previous
Next
Reply
Map
View

Click here to load this message in the networking platform