Hi There,
I'm designing the SOA application (web based application) and humbly request for your suggestions about the best security practice in accessing the SQL server database.
Basically it will be intranet-based system and between the client and the service (server) are sitting in 2 seperate machines. I'll be using a windows authentication for SQL server but I don't want to grant access for each individual user to SQL server which will enable the user to open SSMS. However, i wish the application to have access to SQL server reagrdless who is running the application but also at the same time, I need to log (for auditing purpose) who is running the application based on the current user's windows credential.
can anyone please help with this?
thanks
...
Go to the complete details ...