Post reply

What is a User without a login that cannot login but can be granted permissions used for?

  • March 14, 2013 at 8:04 pm

    #291064

    I presume Integrated Security is required since there is no login in a connection string as I understand this type of SQL login but what is it generally used for and what kind of permissions are then generally granted?

    Would this type of login for example be typical for creating a User that gets logged in by Integrated Security but must only be granted permissions to create and edit data in a table but not be allowed to delete any data?

  • March 14, 2013 at 8:57 pm

    #1597331

    Here is a thread that discusses the same topic.

    http://www.sqlservercentral.com/Forums/Topic964422-1526-1.aspx#bm989971

    Jason...AKA CirqueDeSQLeil
    _______________________________________________
    I have given a name to my pain...MCM SQL Server, MVP
    SQL RNNR
    Posting Performance Based Questions - Gail Shaw[/url]
    Learn Extended Events

  • March 15, 2013 at 3:59 am

    #1597406

    clintonG (3/14/2013)

    Would this type of login for example be typical for creating a User that gets logged in by Integrated Security but must only be granted permissions to create and edit data in a table but not be allowed to delete any data?

    No, any form of logging in requires a login to exist.

    A user without a login can be used for impersonation via the EXECUTE AS command. Two ways, you can have a procedure EXECUTE AS a higher privileged user, one that can't be used normally by people because they can't log in as it, or you can have the EXECUTE AS and REVERT commands before and after some piece of code that requires higher permissions.

    The first is probably more useful, the user running the procedure doesn't need impersonate permissions, just permissions to run the procedure and they are elevated to the higher privilege user just for the duration of the proc.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass

  • March 15, 2013 at 9:49 am

    #1597561

    Thanks for the link... both explanations help a lot

  • March 15, 2013 at 9:49 am

    #1597562

    Thanks for the clarification. The link shown about and your comments help explain this type of login

  • March 15, 2013 at 10:05 am

    #1597567

    clintonG (3/15/2013)

    Thanks for the link... both explanations help a lot

    You're welcome

    Jason...AKA CirqueDeSQLeil
    _______________________________________________
    I have given a name to my pain...MCM SQL Server, MVP
    SQL RNNR
    Posting Performance Based Questions - Gail Shaw[/url]
    Learn Extended Events

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply