mary chipman

You don't have to implement security in such a way that non-authorized
applications can connect to the back end. You can revoke permissions
to public, and grant permissions only to the approle.

-- Mary
MCW Technologies
http://www.mcwtech.com

toledo

Thanks for the reply, Mary.

The problem is that I cannot use approle as pooled
connection doesn't work with approle. If I don't use
pooled connectio I will have a serious performance problem.

See issue at:
http://support.microsoft.com/default.aspx?scid=kb;en-
us;229564


non-authorized

permissions

<ctoledo@investran.com>

toledo

problems when using

to use OLE DB


table.

table.


authroized


confers no rights.

problem.

mary chipman

Well then you can't use approles, right? What I was attempting to
point out is that NOT using approles doesn't have to jeopardize
security. You might want to take a look at the security whitepaper,
http://www.microsoft.com/sql/techinfo/administration/2000/securityWP.asp

-- Mary
MCW Technologies
http://www.mcwtech.com