On Wed, Oct 14, 2015 at 12:01 PM, Kurt Wendt <[email protected]>
wrote:

> Stephen,
>
> Thanks for the reply. In regards to "AD" - that refers to Domain??
>
> And, to answer your other comment - yes, there may be at times when a
> Stored Procedure has to write a file.
>
> I'm going to pass your comments on to my manager - and will follow-up
> again here if she has further questions.
> -----------------



AD - Active Directory.

I have pretty much only use groups for data access in my 50+ dbs.

We have a group for P&L Reporting in an add-on app for our ERP system.  All
plant managers and office managers are apart of thsi group.  45 people in
this case.  I have the security on the db allow them RO data access if they
are apart of this group.  I set the access they get and I could get anal to
any and all the objects if I ever wanted to but NEVER DO.

They log onto our network and when their userid is passed back to the
server AD lets the server know if they are a member of the group for
reading or manipulating how data is presented.  If you are you are in.


I do the same for developers.  Some get dbo access and two others get sa.


-- 
Stephen Russell
Sr. Analyst
Ring Container Technology
Oakland TN

901.246-0159 cell


--- StripMime Report -- processed MIME parts ---
multipart/alternative
  text/plain (text body -- kept)
  text/html
---

_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: 
http://leafe.com/archives/byMID/profox/cajidmylm2gwugffdff6j5p_ibdab08jcyp8pfahngi0qo88...@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to