About SQL Server security
        Posted  
        
            by Felipe Fiali
        on Stack Overflow
        
        See other posts from Stack Overflow
        
            or by Felipe Fiali
        
        
        
        Published on 2010-05-17T12:22:06Z
        Indexed on 
            2010/05/17
            12:30 UTC
        
        
        Read the original article
        Hit count: 297
        
I have an ASP.NET application which runs under the Classic .NET AppPool in IIS.
I have a report to render from my website.
The problem is SQL Server keeps telling me that it failed to create a connection to the datasource, because login failed for user IUSR.
After adding that user directly to the databse I could get the report to work, but I'm concerned about security.
By doing that, am I opening my specified databases to all websites hosted on IIS? Or is that account identity-specific?
© Stack Overflow or respective owner