How to prevent users from connecting to the DB server?

herrJones
herrJones Member Posts: 8
edited 2012-07-15 in SQL General
Hello,

I wonder if it is possible to prevent users from connecting directly to the DB server (eg: in a program - or worse - via the SQL server management studio itself).
They must be able to connect via Navision though :)

Only special roles / logins should be able to execute / select on the DB server itself
All other users should have only 1 option: their Navision client...

Thanks,

Jan

Comments

  • kriki
    kriki Member, Moderator Posts: 9,121
    In NAV, use the standard security model.
    In SQL, you just need to give them public rights to the DB.

    If you have a user that needs to import objects (tables!!!), that user needs to have dbowner in that DB.
    Regards,Alain Krikilion
    No PM,please use the forum. || May the <SOLVED>-attribute be in your title!

  • stryk
    stryk Member Posts: 645
    As kriki said: as long as the NAV users just have the normal "public" rights the system is waterproof - users could connect to the SQL Server, but they won't see any tables (except for few system-tables).

    If that is not sufficient enough you might create a SQL Server site Trigger for LOGON, e.g. checking on the Application Name or something. But take care: if you are nor familiar with such SQL programming DON'T DO IT, else you might screw up your system!
    Jörg A. Stryk (MVP - Dynamics NAV)
    NAV/SQL Performance Optimization & Troubleshooting
    STRYK System Improvement
    The Blog - The Book - The Tool

Categories