Question

I have created a WPF application that connects to a SQL Server database directly (not through services), located on database server. Now I need to create user management, where each user will have its own log in credentials (not windows authentication). This is how I thought of doing it:

1. During the application installation, DB administrator will provide me with an account that contains enough permissions to create database

2. Using these credentials I will connect to SQL Server, execute a script to create database, and also execute a script to create one default admin user for this database, that will have full permissions.

3. I will use this new user to manage all users and roles for my database.

4. for each user in my application I need to create a user in my database.

Questions:

• is this correct way of doing it?

• I am confused about how to manage this. If I have a table Users and Roles in my database, and I also need to create users and roles on database level, then it looks like I am duplicating stuff?

Or I am missing something?

Answer 1

There is only very minor overlap. In your Users table you store the username that matches up with the SQL account, the username is the only overlap. All other information is stored in the Users table.

I don’t see any problem with doing it this way, the only downside is that you are required to have an admin account with a considerable amount of access on whatever SQL Server it’s installed on, but it sounds like you have already taken that into consideration.