Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 General SQL Server Forums
 New to SQL Server Programming
 File access permissions filestream

Author  Topic 

ciag
Starting Member

2 Posts

Posted - 2013-07-09 : 05:53:57
Hi Folks,

we are using MS SQL 2008

I have a database that we use for 'external' user access. The 'external' users are not employees of our company so we give them a very limitied account which purely has access only to open a VPN connection and connect to our database using an installed application on their computer which we have provided for them.

One of the policies we have here is that external users are not allowed direct access to any file share server. As the external users are given special accounts we can't even add their usernames to the permissions of the fileserver structure.

In the past week however a requirement popped up which now means that we have to link individual .dwg files stored on fileshares into forms which would be accessed by users from the databasse interface. Both internal and external users are required to open and edit DWG files.

The location of the files cannot be moved as it needs to be this central location.

So as I see it I need to be able to give edit access to the files on the fileshare to thee external users without granting direct access to the files, as this would be in violation of our policy. I was told Filestream could provide the kind of access I need but I am not able to determine this fully for reading this on the Microsoft website.

Is this a method that could work or is there a better alternative out there that doesn't cost an arma nd a leg

thanks


visakh16
Very Important crosS Applying yaK Herder

52326 Posts

Posted - 2013-07-09 : 06:17:25
Which version are you using?
If using SQL 2012, you've Filetables feature available. You can create a filetable pointing to your central location and configure it for only T-sql access. So all files inside location will be available as records in filetable and you can manipulate file data through the table. Once restricted, they wont be able to directly access file by going to path but they'll strictly need to use t-sql queries for that.

See

http://visakhm.blogspot.in/2012/07/working-with-filetables-in-sql-2012.html

http://msdn.microsoft.com/en-us/library/gg509086.aspx

http://visakhm.blogspot.in/2012/07/triggers-on-filetables-in-sql-2012.html

------------------------------------------------------------------------------------------------------
SQL Server MVP
http://visakhm.blogspot.com/
https://www.facebook.com/VmBlogs
Go to Top of Page
   

- Advertisement -