Results 1 to 4 of 4
  1. #1
    Join Date
    May 2003
    Posts
    60

    Question Unanswered: DTSrun utility security ??

    Using SQL2000

    I've created a DTS package and I now want to kick it off via a webpage interface. The package is realatively simple and either adds new rows to a table or updates them or both.

    My question is this. If I create a batch file on the server that calls the DTS package and the Webpage is the client which executes the batch file what security context is the package going to run in.

    The dtsrun batch file looks like this.
    dtsrun /Sservername /Npackagename /E /Mpassword

    The /E tells the package to use windows authentication.

    As always, Thanks

  2. #2
    Join Date
    May 2003
    Location
    UK
    Posts
    220
    Hi

    A batch file will usually run in the security context of the user that kicked it off. Its worth making sure the user context has the required access to tables stored procedures etc ( read, update etc ) as well.

    Be careful too if you are passing user crededtials from a web site on the internet to the SQL box - its an accident waiting to happen unless its an encrypted link ( people can "sniff" network traffic to capture the username & password). Alternatively, you could have a web page that updates a field in a table and have a job on the server that scans the table for a change in value, then kicks off a DTS package. This stops credentials being passed around the network.


    Cheers,

    SG.

  3. #3
    Join Date
    May 2003
    Posts
    60
    Great information and very unique way of getting around the username and password thing. I was expecting that I would have to encrypt but with your suggestion I'm thinking I'll try the table update you suggested.

    I was fairly sure about the security context but I wanted to double check.

    Thanks for the reply

    Mike

  4. #4
    Join Date
    May 2003
    Location
    UK
    Posts
    220
    Howdy

    Glad I could help.

    Cheers

    SG

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •