Web Connection User Discussions
MS SQL Database PERMISSIONS for WebConnect logging and administration
Gravatar is a globally recognized avatar based on your email address. MS SQL Database PERMISSIONS for WebConnect logging and administration
  Michael Hogan (Ideate Hosting)
  All
  Mar 17, 2025 @ 08:10am

I have set up a SQL database for my client's WebConnect application using the Create SQL Server Tables Wizard. So far, I have only set up my WebConnect tables with my own SA access to everything on all databases and tables.

Now I want to give a client access to a single database

To set up their access to the MS SQL tables in a single SQL Database (without granting access to any other databases), what settings should I set up for them and their application under [Database Name] - Security - Users - [User Name]:

  • Owned Schemas
  • Membership
  • Securables
  • Extended Properties

They'll want to access their data (of course) but also allow their WebConnect application to save its logs to the table.

TIA

Gravatar is a globally recognized avatar based on your email address. re: MS SQL Database PERMISSIONS for WebConnect logging and administration
  Richard Kaye
  Michael Hogan (Ideate Hosting)
  Mar 17, 2025 @ 09:16am

I would not put the wwrequest/wsession tables in the same DB your application data lives in. At a high level, you're going to want to separate the framework's SQL access from your application's SQL access.

Gravatar is a globally recognized avatar based on your email address. re: MS SQL Database PERMISSIONS for WebConnect logging and administration
  Michael Hogan (Ideate Hosting)
  Richard Kaye
  Mar 17, 2025 @ 11:02am

Of course - I'm referring to only the wwrequestlog/wsession/wws_id tables for this question.

Gravatar is a globally recognized avatar based on your email address. re: MS SQL Database PERMISSIONS for WebConnect logging and administration
  Richard Kaye
  Michael Hogan (Ideate Hosting)
  Mar 18, 2025 @ 02:31am

I'm using SQL for the ww tables in my application. I've assigned the standard data_reader and data_writer roles to a dedicated SQL login. Haven't done anything with the other items you mentioned.

Gravatar is a globally recognized avatar based on your email address. re: MS SQL Database PERMISSIONS for WebConnect logging and administration
  Rick Strahl
  Richard Kaye
  Mar 19, 2025 @ 10:27am

I often wonder exactly what's required. SQL Server can be very finicky with permissions in some cases, but for application users Data_Reader and Data_Write is usually all that's needed.

+++ Rick ---

© 1996-2025