• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 94
  • Last Modified:

How to grant read-only access to the data in an application

Hello All,

I will soon be decommissioning an application but this application will still need to be accessible by the users for historic purposes. I want the users to be able to view data only and I am thinking about my options on making this possible since I don't see any permissions setting in the application that will help me out on this.

The application is AD integrated and it points to a SQL database. It seems that the application have created SQL logins for the application users.

I was wondering if it would be possible to set the users to read-only by just assigning datareader role to their SQL logins.

Have someone come across to a similar situation?

Any help will be greatly appreciated.

Thanks!
0
LuiLui77
Asked:
LuiLui77
1 Solution
 
Scott PletcherSenior DBACommented:
If it's contained with one database, you can set that db to read-only.

But, yes, you should also be able to limit users to read-only by removing their existing permissions and just giving them datareader permissions.
0
 
RayData AnalystCommented:
Used to do this all the time with a reporting application and YES, setting the SQL users to "datareader" will allow them only that option as long as that is the only checkbox checked (public would also be checked).
0
 
Scott PletcherSenior DBACommented:
Permissions can be granted outside of a "check" on a GUI/screen.  Indeed, being a DBA, I *never* assign permissions using a GUI.  For standard roles and some permissions, the check mark will show up from the command.  But some command permissions don't have corresponding check marks, but they still give permissions.

In short, don't rely on "check marks" to determine all permissions that are in effect.
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
LowfatspreadCommented:
are you sure the application doesn't use any stored procedures?
0
 
LuiLui77Author Commented:
After attempting setting the database to Read-Only mode I could not even log into the application, later I found that the application need read and write permissions on an activity log table. I contacted the application's support and they stated that the only way to accomplish ReadOnly permissions was by setting the permissions in the application level which I ended up on doing so, the only drawback is that the permissions settings in the application are not that explicit and you have to guess per say what are the permission you actually need.
0
 
LuiLui77Author Commented:
Answer were drew from experimenting and contacting the application's support.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now