October 25, 2009 at 12:53 am
Hi,
I would like to allow users to import specific data from SQL server express 2005 into Excel 2003. I can setup an excel template that accesses a specific view with the columns required. With this method I am concerned about the database security (ie. users viewing other table information). Is there a way to do this where users will only be able to see this view, and not import data from another table with the same connection (if they knew what they were doing)?
Thanks
October 25, 2009 at 10:10 pm
Yep... create a new role on the database that has no privs to anything except the view and use that role to "Get External Data" in Excel.
--Jeff Moden
Change is inevitable... Change for the better is not.
October 26, 2009 at 12:48 am
Hi,
Thanks for your answer. I will look into Roles and implement.
Is ODBC the way to connect to import the data, or is there another more secure way?
Thanks
October 26, 2009 at 7:37 am
ODBC should be fine as long as the database user account is only a member of the new ROLE which only has SELECT permissions on the VIEW.
One way I would typically validate this is to log in as that user account with Query Analyzer. The only objects that appear in the Left Object Browser pane would be those that the account can access.
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply