Restrict Database access by application

  • In SQL 2005, is there a way to deny access for certain application such as Toad?

  • it depends on what you mean.

    access and rights to objects are tied to a login.

    if you give me a login, i can use any application i want to connect...but the login decides what db's i can see, as well as what i can do inside the db once i'm there.

    there are some threads here on creating a logon trigger that tests the application_name being used, and prevetns a logon if they were using SSMS for example, but the problem is, those values can be spoofed to say anything you want.

    for example, if you know how, you can make SSMS identify itself as something completely different:

    Lowell


    --help us help you! If you post a question, make sure you include a CREATE TABLE... statement and INSERT INTO... statement into that table to give the volunteers here representative data. with your description of the problem, we can provide a tested, verifiable solution to your question! asking the question the right way gets you a tested answer the fastest way possible!

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply