help configuring SQL 2005 user for asp app conneciton

[Scott]

Hi,

My aspx app connects to sql 2005 db via web.config conneciton string. I have
a user name in the string but need to configure the users security
prilevelges and dont know where to start.

This user needs to run store procesdues with select, insert, update, delete
and execute commands.

Can someone point me in the correct direction ?

All i can find online is the asp app security wizard stuff that does not
help me.

Thanks for any advice
Scott

 

[bruce barker]

the best security is to do all update via stored procs, so you just
grant execute access to the stored proc. if selects are done via sp
(with any dynamic sql), again just grant execute to the proc. if your
code does selects, then just grant read to the required tables.

-- bruce (sqlwork.com)

 

[Scott]

thanks for the reply.

All a user does is execute store procedures but at the moment the user name
has sys admin rights.

I just need to configure a user so i can still run the SPs but drop all
rights not required.

Thank you
Scott