Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Hi I would like to block access to insert any data on SQL when a User from a determined Active Directory Group access SQL from MS ACCESS.

Is this possible? if not is there any alternative?

I've tried a server trigger, and was able to prevent access to sql from someone by its IP, and the program name. But I would like to prevent inserts, is there a way to do this?

thanks, Gabriel

share|improve this question
    
ONLY from within Access? Does that group need to be able to INSERT from other places? –  squillman Mar 25 '11 at 14:51
    
Hmmm probably they have access through win applications but they can be filtered, but yes the app has to be filtered. (I know access is impossible as the application name is office, so office is ok) –  Gabriel Guimarães Mar 25 '11 at 14:55
add comment

1 Answer

up vote 1 down vote accepted

You can block for an AD user or group. But not reliably by client used.

Note: Permissions are for principals, not for code generally.

The client name can determined by sys.sysprocesses.program_name.

BUT

This is set by Application Name in the connection string, so it can be any value. And you can't set it in MS Access (upto version 2003 at least): it shows as "Microsoft Office 2003" same as, say, Excel (you can set it from Excel oddly).

So, no, you can't do it.

share|improve this answer
    
so I can only block from a certain AD group ... thanks –  Gabriel Guimarães Mar 25 '11 at 23:29
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.