>All
>
>I'm a bit new with using SQL Server and creating applications. I'm trying to figure out what would be the best method for security. Would it be better to have a table with everyone's IDs and passwords and verify it that way? Or would it be better to be associated with the application only?
>
>Does anyone have any recommendations/suggestions?
>
>Thanks ahead of time!
>
>Nicky

There are many approaches, but mine is to deal with all the security in the application, and not give the user access to anything if they connect outside the ap. Then, our users define sql roles and secuirty in the back end for users they want to give access to some data to create reports for instance.

I use app roles to simplify this.

BOb