Link to home
Start Free TrialLog in
Avatar of Starr Duskk
Starr DuskkFlag for United States of America

asked on

Type of user for database access in web.config

what type of user do I create that is the one that is used for login and password in the connection string for an asp.net web application?

what permissions do I give that user?

is it admin? dbowner?

this is a new sql server 2012 database.

thanks!
ASKER CERTIFIED SOLUTION
Avatar of Deepak Chauhan
Deepak Chauhan
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
what type of user do I create that is the one that is used for login and password in the connection string for an asp.net web application?
You can use a SQL Server login or a Windows Account that has permissions on the database. For a Windows Account you won't need to provide the password since it will be managed by the Active Directory.

what permissions do I give that user?
What kind of permissions that user needs?

is it admin? dbowner?
Do you want him to have full access to your SQL Server or the database?
Avatar of Starr Duskk

ASKER

I asked:

>.what type of user do I create that is the one that is used for login and password in the connection string for an asp.net web application?

That would mean they have to be able to access the database for an anonymous user who happens to use my website so that they can see the menu items retrieved. Then when that user registers to create an account, they have to be able to save things. Then when that user wants to search, they have to be able to run stored procedures.

Basically a user who is going to be using the website and needs to be able to get to the data and alter it from the web application.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I created a user with read, write and execute permissions. I had to create a role for db_execute first and add that to that user on each actual database.

CREATE ROLE db_executor;
GRANT EXECUTE TO db_executor;

thanks!