I have a connection string in my asp.net code that looks at a SQL Server 2005 database. I created a UserName called WebUser and granted him db_datawriter and db_datareader in SQL Server 2005. Both under Login and under the database the user must be able to read and be able to make updates? Is this all I need or the correct thing to do?
Connection string will look like this.
<add name="ConnectionStringName" connectionString="DataSource=localhost;
Initial Catalog=DBName;User ID=WebUser; Password=mypassword;
Integrated Security=FALSE"
providerName="System.Data.SqlClient"/>
</connectionStrings>