Solved

How to grant read-only access to the data in an application

Posted on 2015-01-21
6
88 Views
Last Modified: 2015-02-11
Hello All,

I will soon be decommissioning an application but this application will still need to be accessible by the users for historic purposes. I want the users to be able to view data only and I am thinking about my options on making this possible since I don't see any permissions setting in the application that will help me out on this.

The application is AD integrated and it points to a SQL database. It seems that the application have created SQL logins for the application users.

I was wondering if it would be possible to set the users to read-only by just assigning datareader role to their SQL logins.

Have someone come across to a similar situation?

Any help will be greatly appreciated.

Thanks!
0
Comment
Question by:LuiLui77
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 69

Expert Comment

by:Scott Pletcher
ID: 40562567
If it's contained with one database, you can set that db to read-only.

But, yes, you should also be able to limit users to read-only by removing their existing permissions and just giving them datareader permissions.
0
 
LVL 11

Expert Comment

by:Ray
ID: 40562574
Used to do this all the time with a reporting application and YES, setting the SQL users to "datareader" will allow them only that option as long as that is the only checkbox checked (public would also be checked).
0
 
LVL 69

Expert Comment

by:Scott Pletcher
ID: 40562595
Permissions can be granted outside of a "check" on a GUI/screen.  Indeed, being a DBA, I *never* assign permissions using a GUI.  For standard roles and some permissions, the check mark will show up from the command.  But some command permissions don't have corresponding check marks, but they still give permissions.

In short, don't rely on "check marks" to determine all permissions that are in effect.
0
What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

 
LVL 50

Expert Comment

by:Lowfatspread
ID: 40567959
are you sure the application doesn't use any stored procedures?
0
 

Accepted Solution

by:
LuiLui77 earned 0 total points
ID: 40594831
After attempting setting the database to Read-Only mode I could not even log into the application, later I found that the application need read and write permissions on an activity log table. I contacted the application's support and they stated that the only way to accomplish ReadOnly permissions was by setting the permissions in the application level which I ended up on doing so, the only drawback is that the permissions settings in the application are not that explicit and you have to guess per say what are the permission you actually need.
0
 

Author Closing Comment

by:LuiLui77
ID: 40602727
Answer were drew from experimenting and contacting the application's support.
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Recently I was talking with Tim Sharp, one of my colleagues from our Technical Account Manager team about MongoDB’s scalability. While doing some quick training with some of the Percona team, Tim brought something to my attention...
Video by: Steve
Using examples as well as descriptions, step through each of the common simple join types, explaining differences in syntax, differences in expected outputs and showing how the queries run along with the actual outputs based upon a simple set of dem…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question