Reputation: 1589
I have a website that is used for uploading data to a restricted database. Usually when I built out connection strings for SQL Server inserts, it was from an in house user so I could use windows authentication, what's the best practice for when the user does not have access to the database?
Upvotes: 0
Views: 956
Reputation: 28970
Yes exactly, read this article msdn it's very interessant
Link : http://www.connectionstrings.com/
Upvotes: 1
Reputation: 5109
The best practice is to authorize your IIS APPpool where your website is running on... You can simply do this by creating a user in sqlserver.... FOr example IISApppool\Yourapppoolname. You can find the name of the pool where your site is running in the IIS manager.
Upvotes: 1
Reputation: 3109
You have to use a SQL user specific to the website.
Upvotes: 0