If you have not created each user's SQL login, it won't work.  However,
I wouldn't want to have to manage all those SQL logins (and database
permissions), in addition to their AD accounts.

As I mentioned in another message, you may try adding a domain group as
a SQL login/DB user.

That said...

I think most people use a single DSN user account to connect to their
databases.  That is how I operate.

The good news is since you are on an Active Directory domain, you can
leverage the strengths of AD to control access to your CF application.

Create/organize domain groups that equate to the secured areas of your
CF application.  Then, use CFLDAP to retrieve the group membership and
allow, or deny, the user when they attempt to access a secured area. 

ColdFusion and Active Directory can make a very-powerful alliance!

Mike

-----Original Message-----
From: Carl Von Stetten [mailto:[EMAIL PROTECTED] 
Sent: Thursday, December 04, 2008 12:54 PM
To: cf-talk
Subject: Re: Microsoft SQL Server JDBC Driver and Authentication

I tested a little bit further by going into SQL Server Management Studio
and removing permissions to the database for the ColdFusion service
login account.  When I attempt to run the query, it does attempt to use
the username I'm passing, but then gives me an error:

"Cannot open database "GDI" requested by the login. The login failed."

The only reason I was even trying this was to ensure secure access to a
particular database that only certain users have permissions to write
to.  I guess I'll have to manage the permissions through my CF
application, rather than at the SQL Server level.  Is this how most
developers deal with data security?

Carl

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;207172674;29440083;f

Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:316289
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to