April 20, 2016 at 9:59 am
Hello,
I am planning to execute one software. For this procedure, I need to connect with the database.
When I executed that software it stops and when I checked its log file it says
Target login is not a member of DB_OWNER role
How could I solve this error?
I login in SQL Server Management studio as username :sa and its password. and password also executed as sa.
Any help would be appreciated.
Thanks
April 20, 2016 at 10:32 am
The error message itself appears not to come from SQL Server, but from the application. However, the terms used are clear and tell us what the problem is.
Apparently, this software needs to use a login that is a member of the role "DB_OWNER". The problem I have with that is that this role should be used for and by administrators only, as it grants virtually unlimited rights.
My first action on this error would be to contact the vendor and have them fix their software. Third party programs should not require such unlimited privilges, this is a known bad practice and security risk.
If the vendor claims that the tool cannot be changed and your management ignores your warnings and insists that you install it, then I suggest creating a user in this database speciflcally for this application. Add it to the db_owner role in the database used for the application, and ensure that it has no access at all to any other database.
If the sentence above contains any terms or concepts you do not understand, then use a search engine and read up on them. If you open a security hole and the company ends up being exposed because of it, you will be held responsible - so it is in your best interest to make sure that you understand all this.
April 20, 2016 at 11:00 am
Thanks for your reply. I appreciated...
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply