application role

Question

Post reply

application role

Subu

Say Hey Kid

Points: 680
More actions
November 28, 2007 at 11:35 pm

#179573

Hi Exports
what are difference between
application role and database roles
any body give comment on this topic we will appreciate to all

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply

Oana Schuster SSCommitted Points: 1642 More actions · Answer 1

Hi,

Application Roles

Application roles are the SQL Server roles created to support the security needs of an application. Often database applications enforce their own security based on the application logic. For example, you can use application role with its own password to allow the particular user to obtain and modify any data only during specific hours. So, you can realize more complex security management within the application logic.

Database Roles

A database role applies to a single database. The database roles in a database apply to only that database and the objects within that database. Database roles are not used to grant or deny administrative access to objects.

There are three kinds of the database roles:

-Fixed Database Roles;

-Public Role;

-User-Defined Database Roles.

Fixed database roles are defined at the database level and exist in each database.

You cannot add, delete or modify fixed database roles. You can only add users as a member of a fixed database roles.

Fixed database roles are:

-db_owner

-db_accessadmin

-db_datareader

-db_datawriter

-db_ddladmin

-db_securityadmin

-db_backupoperator

-db_denydatareader

-db_denydatawriter

The public role is a special database role to which every database user belongs. The public role contain default access permissions for any user who can access the database. This database role cannot

be dropped.

Although the built-in database roles handle permissions for common database management tasks, it's likely that you will want to group users who have access to perform specific database functions.

Regards,

Oana.

Subu Say Hey Kid Points: 680 More actions · Answer 2

HI Oana Schuster

Thanku for ur reply

can u plz give some examples in applications server roles

like database roles

Best Regards

Oana Schuster SSCommitted Points: 1642 More actions · Answer 3

Hi,

please read this:

http://articles.techrepublic.com.com/5100-22_11-5068954.html

hope it helps 😉

Regards,

Oana.

Chandra Sekhara Vyas Dhara SSChampion Points: 10207 More actions · Answer 4

Application Roles:

Application roles are the SQL Server roles created to support the

security needs of an application. Often database applications

enforce their own security based on the application logic.For example, you can use application role with its own password to allow the particular user to obtain and modify any data only during specific hours. So, you can realize more complex security management within the application logic.

Example: client application conects to database.

To add a special type of role in the current database, which is used

for application security, you can use sp_addapprole stored procedure.

This is the syntax:

sp_addapprole [@rolename =] 'role', [@password =] 'password'

where

@rolename - is the name of the application role.

@password - is the password for the new application role.

Database Roles:

Database roles are defined at the database level and exist in each database.

There are three kinds of the database roles:

1.Fixed Database Roles

2.Public Role

3.User-Defined Database Roles

1. Fixed database roles are defined at the database level and exist in

each database.You cannot add, delete or modify fixed database roles. You can only add users as a member of a fixed database roles.

There are nine fixed database roles:

db_owner

db_accessadmin

db_datareader

db_datawriter

db_ddladmin

db_securityadmin

db_backupoperator

db_denydatareader

db_denydatawriter

2. Public Role:

The public role is a special database role to which every database

user belongs. The public role contain default access permissions

for any user who can access the database. This database role cannot

be dropped.

3. User-Defined Database Roles:

Although the built-in database roles handle permissions for common

database management tasks, it's likely that you will want to group

users who have access to perform specific database functions.

To create a new SQL Server role in the current database, you can use

sp_addrole system stored procedure.

This is the syntax:

sp_addrole [@rolename =] 'role' [,[@ownername =] 'owner']

where

@rolename - is the name of the database role.

@ownername - is the owner of the new role.

forsqlserver SSCoach Points: 18902 More actions · Answer 5

The application role are required by database applications.

What database applications these are?Please give example.

Thanks