Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 Express Edition and Compact Edition (2005)
 How to configure security ?

Author  Topic 

matojo2006
Starting Member

1 Post

Posted - 2005-11-04 : 14:09:29
I have a web server, which I like to allow my site members to create their own websites and host. When a member register, I will create a windows user and virtual directory for each member.

I like to allow each member to make use of my SQL Server Express installation. How can I configure the security in SQL Server Express so that all members can use the database, but secure each members data from others?

I have enabled Windows authentication currently. When someone connect using "Integrated Security=SSPI", they can connect to any database of any other member using the "attach db filename" option. (Assuming I will allow each member ot upload an mdf file and use auto attach feature). How can I prevent this?

Or, do you reccommend disabling auto attach feature? In that case, I have to manually create a database for each user and set security and permissions so that each database is accessible to only the owner.

Please let me know your thoughts.

Thanks in advance.
   

- Advertisement -