Best Server Role for Web Applications

Hi,
I'm running SQL Server 2008 R2 Express and using Microsoft SQL Server Manager Studio to administer it.  I have a web application that does read, add, update, and delete to the database and I am currently using the sa account - which is of course not
a good idea.  I want to create a new user but I don't know what the best practice is for web applications and also security.  The options I have are:
bulkadmin
dbcreator
diskadmin
processadmin
public
securityadmin
serveradmin
setupadmin
sysadmin
Thanks.

Hi mark_sti,
Based on my understanding, you want to create a new user of the database. Using this new account, a web application could read, add, update, and delete the database.
The options you provide are fixed server roles. For more information about fixed server roles, please refer to this article:
Server-Level Roles.
In this scenario, you need db_datareader fixed database role and db_datawriter fixed database role. Db_datareader fixed database role can read all data from all user tables. Db_datawriter fixed database role can add, delete, or change data in all user tables.
To add two database roles, you should map the login to the database which is used by a web application in Login Properties. Then create a new database user, check Db_datareader fixed database role and Db_datawriter fixed database role on Membership page of
Database User. About permission of different database roles, please refer to this article:
Database-Level Roles.
If you have any question, please feel free to ask.
Best regards,
Qiuyun Yu

Similar Messages

  • 500 Internal Server Error   BEx Web Application

    Hello,
    can everybody help for the fault, or had the same error ?
    500 Internal Server Error
      BEx Web Application
    Failed to process request; contact your system administrator
    Error Summary
    Exception occured while processing the current request; this exception cannot be handled by the application or framework
    If the information on this page does not help you locate and correct the cause of the problem, contact your system administrator
    To facilitate analysis of the problem, keep a copy of this error page Hint: Most Web browsers allow you to select all content, and copy and paste it into an empty document (such as in an email or simple text file)
    Root Cause
    The initial exception that caused the request to fail was:
    Cannot get connection for 60 seconds. Possible reasons: 1) Connections are cached within SystemThread(can be any server service or any code invoked within SystemThread in the SAP J2EE Engine), 2) The pool size of adapter "SAPFactory" is not enough according to the current load of the system or 3) The specified time to wait for connection is not enough according to the pool size and current load of the system. In case 1) the solution is to check for cached connections using the Connector Service list-conns command, in case 2) to increase the size of the pool and in case 3) to increase the time to wait for connection property. In case of application thread, there is an automatic mechanism which detects unclosed connections and unfinished transactions.
    Log ID 0014C265209B005B000007300000610A000473C4612CBCB9
    thanks

    Hi,
    I am getting similar kind of error.Can you please tell me how you resolved the issue.
    Regards,
    Priyanka

  • Configure Logical Address for Web Applications-Hyperion 11.1.2

    Hello,
    I have f5 load balancer infront of two foundation servers and I have not yet configured the Logical address for web applications with Loadbalancer DNS name/hostnmae. I can access all of web applications through Load Balanced URL. Do I Still need to configure Logical Web Address for web applications ?
    Thank you so much !

    To add to this part of the reason for load balancing is usually to support high availability (in addition to scalability). Without that logic address being setup you will find certain configuration items are pointed to one server or another and if that one server is brought down it impacts key functionality of the whole environment.
    You should consider a test of the infrastructure by purposely bringing down services and/or servers to ensure you still have a fully working environment with the other redundant components. This test may take half a day to several days to really go through a full regression test of key features while taking key pieces down.
    Regards,
    John A. Booth
    http://www.metavero.com

  • How sharepoint understand when user requests for web applications by their DNS names

    HI
    I configured Alternate access mapping in my sharepoint farm for default ,intranet zones
    and spt farm has two web front end servers and they load balancing by F5 device
    in WFE servers there are different web applications are running on different ports
    so here I want to know how load balancing works, load balancing configured in F5 device.
    when users request a webapplication from browser (ex http://cms) where this request will go
    1)when I ping cms and other web applicaations  it returns me a loadbalancer  server IP  for all web applications;
    ping cms : it returns 10.xxx.0.80 , same ip returns when I ping for other web app
    but ex CMS web application run on the 10.xxx.1.26:81 port in sharepoint server
    2) and these sharepoint web applications running on different ports in sharepoint  web servers , so here  how sharepoint understand when user requests for web applications by their DNS names
    http://cms and http://products  etc
    adil

    I'm not sure if the F5 can add a port number (I'm not an expert on load balancers).  But in general if you design the SharePoint site to run on port 81 then you need to have port 81 appended to the request or it won't work.  http://cms in your
    example would take you to http://cms:80 not http://cms:81.  But in general DNS will resolve the address back to the F5 load balancer.  The load balancer will look at the header of the HTTP request (which contains the original address you requested)
    and forward the request to the appropriate web front end IP address.  If your web front end is using one IP address for multiple sites then those sites need to be differntiated by using a custom port like 81 (which must be included in the original request)
    or because a host header was bound to the web application when it was created.  If they are running on different port numbers then the request must include the port number by the time it gets to the SharePoint server.
    Paul Stork SharePoint Server MVP
    Principal Architect: Blue Chip Consulting Group
    Blog: http://dontpapanic.com/blog
    Twitter: Follow @pstork
    Please remember to mark your question as "answered" if this solves your problem.

  • Does Developer 9i only for web application

    Dear Friends,
    Does Developer 9i only for web application?
    Thanks

    Although in theory you can install the client and the application server on one machine so you can be "2 tier" but yes, client/server was desupported back in 6i.

  • Custom host-name for web application SharePoint 2010

    I am facing a weird behavior. Can anyone help me regarding this?
    Steps performed:
    1. Created a web application using custom host name.
    2. Created a site collection using "Blank" site template. Nothing issues.
    3. Created another site collection using "Publishing" site template. Authentication prompt came multiple times. IIS logs/Fiddler/HTTP Watch are full with 401 entries.
    4. Added the custom host-name with web server IP in local desktop hosts file(which is in intranet domain). Prompt issue fixed.
    5. Authentication mode set as NTLM. 

    Hi DDasgupta,
    After you created a web application with a custom host name, if you got a prompt for the user and you may face the following issues:
    There is continuous prompt for the credentials
    HTTP 401.1 error
    This shows that there is a problem with the Loopback configuration. This situation should occur only when we access the application from the server machine.
    For fixing the problem, we have to disable the Loopback value inside the registry.Open the Registry Editor (regedit.exe) and locate the following key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa, and create a new Key Value of type DWORD inside
    it and set the value to 1.
    More information, please refer to the link:
    http://www.c-sharpcorner.com/UploadFile/40e97e/sharepoint-2010-creating-host-name-for-web-application/
    I hope this helps.
    Thanks,
    Wendy
    Wendy Li
    TechNet Community Support

  • Setup Developer for web application.

    Hi all
    I am trying set up developer 9i for web application.
    I have Oracle 8 client installed on my computer.
    Which components should I dowmload and installed on my computer.
    I have downloaded.
    Application Server 9i core and developer 6i.
    Are they enough to setup the evironment?
    Regards
    Hao

    Yes that would be enough.
    Install each one in a different Oracle_home.

  • API for Web Application

    Hi,
    Do you provide an API for Web Applications? We are a SaaS provider and are looking to integrate your calendar components into our system. I searched through the developer tools but couldn't find a suitable API. Let me know.
    Thanks!
    -Jen

    You will want to look at the SOAP API which provides access to user data like calendars, tasks, notes, and mail - secured with the user's credentials. A trusted application key can also be created by system administrators which serve the purpose of a skeleton key, allowing for your application to access any user's mailbox without the need to know their password. There is also the calendar publishing agent which allows users to publish a calendar via ical and so on.
    So a lot depends on what you are trying to do specifically.
    The GW SOAP API pages are a good place to start is a good place to start. There are links from there to other APIs.
    FWIW, SOAP is used internally by Novell in both their Web Access and Data Synchronizer ( Active Sync ) services, so it is robust, fairly speedy, and stable.
    -- Bob

  • Different results on consecutive runs of OFT for Web Applications

    I am using Oracle Functional Testing for Web Applications to test share point site [using: OS = WinXP SP3, default browser = IE8.0.6]
    I’ve recorded simple scenario - browsing through two pages (home page > menu link > page 1)
    there is no user input involved – just browsing)
    problem:
    I am running the same test multiple times and I get different results – sometimes (less often) I get clear ‘Passed’ results but more often I get warnings about missing items, Severe content differences)
    upon comparing Master and Tested HTML I see that test fails because no content is being logged under Tested:HTML node (the content displays properly in right browser pane)
    any hints?

    You probably need a close no save step at the end of your action.
    In the save for web dialog, when you record the action, save to the folder you
    want the batch dialog to put the images. Then set the batch dialog as below.
    MTSTUNER

  • Function authorize in packages for web applications in Oracle XE

    Hello,
    i have created a simple test package as follows:
    PACKAGE TEST IS
    function authorize return boolean;
    procedure test;
    END;
    PACKAGE BODY TEST is
    FUNCTION authorize return boolean is
    BEGIN
    if OWA_SEC.GET_USER_ID = 'test' then
    return true;
    else
    return false;
    end if;
    END;
    PROCEDURE test is
    BEGIN
    htp.prn('Hello World!');
    END;
    END;
    i have also cerated a DAD with this command:
    DBMS_EPG.CREATE_DAD (' test ', '/test/*');
    i want to run this link in my web browser: http://127.0.0.1:8080/test/test.test
    When i use a real database user then the function test works ok.
    But i want to make it work with the user name "test" throw the function authorize.
    In my opinion i am creating a DAD in a wrong way. Can anybody help me?
    Thanks in advance for your help.

    Hi,
    AFAIK, there is no official document which states that "Oracle Functional Testing for Web Applications" is certified with Oracle E-Business Suite 11i/R12. I assume it should work with Forms 10g but not with Forms 6i, so it should work (does not mean it is certified) with R12.
    I would suggest you log a SR and confirm this with Oracle Support.
    Regards,
    Hussein

  • How to capture memory usage for web application

    In OATS openscripts, how to capture memory usage for web application? Does it have the exisitng java method that we can call to get the memory data (e.g. peak bytes, private bytes) consumed by web application?

    JProbe

  • Best practices available for web channel 2007

    Hi All
    Is there any best practices available for web channel 2007,
    can any one please guide where to get them
    regards
    Jaju

    Hi,
    [http://help.sap.com/bp_crmv12007/CRM_DE/HTML/index.htm|http://help.sap.com/bp_crmv12007/CRM_DE/HTML/index.htm]
    In the above link go to Technical Information >Building Block Library > C78: CRM Interaction Center
    Regards,
    Sateesh Chandra

  • ECMA 2.0 for web application

    I coded for ECMA 2.0 for web application using WCF  and deployed the management agent dll in Extension folder with WCF config file named as app.config . I am getting the error at creation of Management agent in FIM synchronization at the time of 
    Refresh Interfaces as The Extension could not be instantiated. May be FIM is unable to read WCF config file from extension folder of FIM sync. Or is there any other thing m missing? . Can any body suggest me.

    Have you tried to put it directly in Synchronization Service binary root folder?
    In the past when we needed to have config file for our MA we have put it in Synch engine folder and registered as app section within either dllhost.exe.config or miisserver.exe.config. THen we had no problem with accessing it. 
    Tomek Onyszko, memberOf Predica FIM Team (http://www.predica.pl), IdAM knowledge provider @ http://blog.predica.pl

  • What is the best data type for wallet application?

    Hi Friends..
    I want to know what is the best data type for wallet application..
    Assume that, i want to the Total of money saved digitally in Applet Wallet..
    And then if there's any transaction the Total of money which saved digitally in Applet Wallet would be Subtracted or Added depends on how much money that spent or saved..
    Which one is the best implementation of these scenarios :
    1. I save the User ID and Total of money in the Java Card, and then if there's any transactions, it would be added or subtracted directly and then saved again in the Java Card
    2. Or.. I save the User ID in the Java Card whereas Total of money in the Database, and then if there's any transactions, the ID would be read from the Card, and then select the Database based on that ID, and then Add or Subtract the money depends on how much money spent in the Transaction
    Please help me regarding this
    Thanks in advance

    Hi,
    Personally I would choose to store the total amount stored on the card. You could use two shorts (short[] perhaps) to store an integer (add more shorts to increase precision) and simply handle overflow your self. You could even look into using a third party library (or class) that treats a byte array as a big integer etc. There were some posts recently on floating point arithmetic that could be helpful for you since you will probably want to use decimals and JC does not natively support floats.
    Cheers,
    Shane

  • Send an email to all user in Oracle Test Manager for Web Applications

    I have administrator access to Oracle Test Manager for Web Applications. How can I send email to all user in the system (Oracle Test Manager for Web Applications)?
    Thanks
    Katherine
    Edited by: Katherine on 20/12/2010 16:38
    Edited by: Katherine on 20/12/2010 16:39

    Hi ,
    You can create a single dynamic distribution group with the condition to have only the mailboxes in exchange as its members . Then when a person send an email to that  Dynamic distribution group it will get distributed to all the mailboxes
    in exchange.
    Note : Most important feature in the dynamic group is that the membership of that group will be maintained automatically and also along with that we can have group membership by defining the recipient types/OU /rules.
    I agree with ED and also based on my knowledge you cannot achieve your scenario without Distribution groups or dynamic distribution groups.
    Thanks & Regards S.Nithyanandham

Maybe you are looking for

  • Typewriter in Acrobat Pro 9

    Typewriter in Acrobat Pro 9 is now only typing in 'Comments' & not on the page. What is wrong?  I opened a pdf document > clicked the typewriter button > the usual 'A_' showed > I clicked on the document were I wanted to enter text > when finished I

  • Macbook pros to TV not working

    I've been connecting my two Macbook pros (2008 & 2011 both on OSX) to a Sony Bravia TV for ages using a HDMI cable connected to a HDMI adaptor to Minidisplay.  For some reason now the connection doesn't work.  I've tried both computers, different HDM

  • ITunes asking for password varification when videos are playing

    Is there a setting that can be changed in iTunes? When I am watching movies on my iMac iTunes will pop up a message stating "check for downloads please enter password" I press cancel and get back to my movie 1-2 min later the same pop up appears and

  • GTX 560Ti Blank Screen on Boot

    Hello guys, I purchased a MSI GTX 560Ti (Twin Frozr-II edition) 5 months back. Recently, when booting...I kept getting a "No Signal" message from the monitor. There was activity on the PC , it managed to get past the POST (beep sound) and eventually

  • My app store has disappeared

    My app store has disappeared of my home of my iPod touch 4g Pls help my ;(