Is SQL Server/Windows integrated security good for anything?

后端 未结 14 1290
北荒
北荒 2021-01-01 00:07

The distinctions among Windows user permissions and any set of SQL Server GRANTs seem like unrelated concepts. As often as not, it seems to actually be implemented with pseu

14条回答
  •  礼貌的吻别
    2021-01-01 00:41

    Since everyone else has discussed the benefits of Windows Authentication, I guess I'll play Devil's Advocate...

    Allowing the account 'Joe User' to have access to the server means that not only can be connect with your app, but he can also connect via any other means (SQL Tools, Excel, malware, etc.).

    With SQL Authentication, your app can run as a certain user and then the app can handle the database access. So when 'Joe User' runs your app, the app has SQL access... But 'Joe User' himself doesn't, which means that the aforementioned apps wouldn't be able to have implicit access to the database.

提交回复
热议问题