security: sql or win connections ?

[Hernán Castelo]

hi
i have 4 accounts in sql : userType1...., 4
and .Asp pages that connect to sql2K using one of them

each account can only execute its stored procedures
each account have its own password
then i have the connection strings in an #include file

I readed that existence of a plain text connection string is a weak,
that is better to use windows authentication to connect
in this situation :
how can i distinguish the user type that is connecting ???
do i have to make the connection specifying
a user type or something like this..... ??
how should i connect?
have anyone a sample ?

thanks
--
atte,
Hernán Castelo
UTN Buenos Aires
.. . . . . . . . . . . . . . . . . . . . . . . . . .

[Aaron Bertrand [MVP]]

You can use windows authentication if your web app only requires one user,
and the application / site is set to use anonymous access but has a domain
user set as the anonymous user (who is also allowed in SQL Server).

Or, if you have all 4 users set up as Windows users, and you disable
anonymous access, and force the users to authenticate as one of the four
users.

In either case, you only need one connection string. See
[url]http://www.aspfaq.com/2126[/url]

--
Aaron Bertrand
SQL Server MVP
[url]http://www.aspfaq.com/[/url]


"Hernán Castelo" <hhh@hotmail.com> wrote in message
news:u1mf7mCGEHA.3180@TK2MSFTNGP12.phx.gbl...

> hi
> i have 4 accounts in sql : userType1...., 4
> and .Asp pages that connect to sql2K using one of them
>
> each account can only execute its stored procedures
> each account have its own password
> then i have the connection strings in an #include file
>
> I readed that existence of a plain text connection string is a weak,
> that is better to use windows authentication to connect
> in this situation :
> how can i distinguish the user type that is connecting ???
> do i have to make the connection specifying
> a user type or something like this..... ??
> how should i connect?
> have anyone a sample ?
>
> thanks
> --
> atte,
> Hernán Castelo
> UTN Buenos Aires
> . . . . . . . . . . . . . . . . . . . . . . . . .
> .
>
>