Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
Noel
Starting Member
3 Posts |
Posted - 2009-11-16 : 04:20:48
|
| I have inherited a SQL Server 2005 without a DBA background or DBA. An external developer has built a new frontend with uses an ODBC connection. The concern is that the ODBC connection could be accessed outside of the new application which has its own authentication. I'd be grateful for guidance on best practice.Many thanks. |
|
|
russell
Pyro-ma-ni-yak
5072 Posts |
Posted - 2009-11-16 : 08:58:04
|
| Is the app web based or a client-server app? You're right to suppose that ODBC is not best practice |
 |
|
|
Noel
Starting Member
3 Posts |
Posted - 2009-11-19 : 04:44:03
|
| Thank you for coming back to me Russell.This is a client-server application. Short of having the new application modified do I have any other options in terms of securing the database. |
 |
|
|
russell
Pyro-ma-ni-yak
5072 Posts |
Posted - 2009-11-19 : 11:17:51
|
| if the connection is using windows authentication you'll be fine. if it's using sql authentication, then I'd change it and the application. |
 |
|
|
Noel
Starting Member
3 Posts |
Posted - 2009-11-23 : 04:39:41
|
| Many thanks. |
 |
|
|
|
|
|