-
Posted to
Security
by
Flackie
on
05-13-2008, 9:31 AM
Ok I think i got it working (for one site anyway, others should be simple now). I ended up creating a new admin login for myself and then using that to go into the SQL management so i knew i had full admin rights. I made sure I gave myself permissions for all the sites I need to change and then ran the code and it worked without error.
I ...
-
Posted to
Security
by
Flackie
on
05-13-2008, 9:18 AM
[quote user="DavidReabow"]
Replace [my_asp_sql_login] with the login that your website uses to connect to the database (not the admin account you are using)
[/quote]
Yes I did... my point of confusion was the first line where you had my_admin_sql_login - the error message (and the post subsequent to yours) suggested that should ...
-
Posted to
Security
by
Flackie
on
05-13-2008, 9:10 AM
[quote user="eftennis"]
use [my_admin_sql_login]
GO
DENY SELECT ON [sys].[sysobjects] TO [my_asp_sql_login]
GO
As you can see, I set up a separate login account for my asp connection. Hope this helps.
[/quote]
I get another error... i put the SQL admin user where you have my_admin_sql_login, and it says:
"Could not ...
-
Posted to
Security
by
Flackie
on
05-13-2008, 9:02 AM
Thanks for the feedback and suggestions. I have tried these, but still with the same error. I am logged into the remote server on Remote Access, and then open up the SQL Management interface with windows authentication. I am logged into the server as a server admin, and assumed I have admin access therefore to the MS SQL server. IS there a ...
-
Posted to
Security
by
Flackie
on
05-13-2008, 3:59 AM
[quote user="greenlit_design"]
1) First to prevent script from executing or any further issues:
deny select on sysobjects to sql_login_of_your_app
deny select on syscomments to ql_login_of_your_app
deny select on syscolumns to ql_login_of_your_app
deny select on systypes to ql_login_of_your_app
The script won't ...