问题
Well, I am currently developing an application where different users can login using their email. The application will save the mail details (sender, message, receiver, attachment, etc) to the database.
My problem is, I don't want the user to have access to the database when using sql server management studio (maybe some techie users would open their sql and edit the the message there, so yea.. I needed some security for the app.).
My solution is i have to set a username/password to the DATABASE only. Is this even possible? OR maybe you can suggest me some ways where the user can't access the sql management studio?
-the application will be deployed on different computers with different servers at different places. Like a standalone app.
hehe. Sorry if my question isn't making any sense, this is my first project on a company so I don't really have that much knowledge yet regarding these things :)
回答1:
Any login credentials that your app can use, the user can extract using a decompiler.
You should create a separate DB user for the app that doesn't have write access to things you don't want users to change.
来源：https://stackoverflow.com/questions/19897518/vb-net-and-sql-server-2005-setting-up-database-password-for-standalone-app