How to prevent users from connecting to the DB server?

herrJones

Hello,

I wonder if it is possible to prevent users from connecting directly to the DB server (eg: in a program - or worse - via the SQL server management studio itself).
They must be able to connect via Navision though

Only special roles / logins should be able to execute / select on the DB server itself
All other users should have only 1 option: their Navision client...

Thanks,

Jan

kriki

In NAV, use the standard security model.
In SQL, you just need to give them public rights to the DB.

If you have a user that needs to import objects (tables!!!), that user needs to have dbowner in that DB.

stryk

As kriki said: as long as the NAV users just have the normal "public" rights the system is waterproof - users could connect to the SQL Server, but they won't see any tables (except for few system-tables).

If that is not sufficient enough you might create a SQL Server site Trigger for LOGON, e.g. checking on the Application Name or something. But take care: if you are nor familiar with such SQL programming DON'T DO IT, else you might screw up your system!