infoRouter Database Permissions White Paper

whitepaper icon

 

  

Microsoft SQL Server

 

 

Installing infoRouter

In order to install infoRouter and create a new database, the ‘dbcreator’ server role is temporarily required (in the example below I have called the user ‘inforouter’):


Members of the ‘dbcreator’ role can create databases, and can alter and restore their own databases. When the installation routine is complete, the ‘dbcreator’ role can be removed from the SQL user that infoRouter will run under. Because, in this instance, the database user that infoRouter connects from has created the database, that user is automatically assigned as the database owner and has the ‘db_owner’ database role, which means it can perform all configuration and maintenance activities on the database, and can also drop the database. In order to remove this permission, you need to change the database owner, using the following script (where ‘
infoRouter’ is the database name and ‘sa’ is the new database owner:

USE infoRouter

EXEC sp_changedbowner'sa'

The user is then required to be given explicit permissions on the database. Note that if the database has already been created prior to the infoRouter setup routine running, this section can be skipped.

01 db permissions login server roles

Running infoRouter

The required database roles are ‘db_ddladmin’, ‘db_datareader’ and ‘db_datawriter’:

02 db permissions login user mapping

 

User effective permissions on database

When setting database permissions, you can see what the effective permissions on that user are in the ‘Permissions’ section of the database ‘Properties’:

03 db permissions db properties permissions

Contact Document Genetics

Document Genetics is an established UK based company providing a comprehensive range of business automation software. We focus on improving document automation, workflow and collaboration within our client organisations, and our range of innovative solutions and specialist services help to save time and money by processing documents and data more efficiently. If you need more information on database permissions within infoRouter using Microsoft SQL Server, we’ll be delighted to help.

Author - © Chris Welch, Technical Consultant at Document Genetics
Hall Farm, Sywell Aerodrome, Sywell, Northampton NN6 0BN
t: 01604 671177

e: This email address is being protected from spambots. You need JavaScript enabled to view it.         w: www.document-genetics.co.uk