re: Quick guide to DB users without logins in SQL Server 2005

raulga — Mon, 20 Nov 2006 22:45:51 GMT

Another good use of users without logins I forgot to mention is as a replacement for application roles (approles) when combined with the optional “WITH NO REVERT” or “WITH COOKIE” clauses.

The main advantage of using users without logins rather than approles is that permission to impersonate is based on permissions and not on a password, eliminating the need to share a password that most likely will be hardcoded into an application.

CREATE USER [myAppUser] WITHOUT LOGIN

-- ...

-- Your application can impersonate the user without login instead of calling sp_setapprole

EXECUTE AS USER = 'myAppUser' WITH NO REVERT

SELECT user_name()

-- ... after that it won't be possible to revert to the original context

REVERT

Connection Pooling vs Audit Logging

Nates Stuff — Fri, 18 Jul 2008 22:22:45 GMT

These past two weeks have been very exciting for me. I have gotten to be involved in some R&D for