Question

ASP.net应用程序能够读取/写入标准持久SQL Server会话状态数据库所需的最小权限集是什么？

Answer 1

我知道这个问题有点陈旧，但我没有看到正确答案。以下是我们为替换内置ASPState帐户而创建的角色授予的内容。出于安全原因，我们不希望我们的网络应用使用的帐户具有.dbo权限。

GRANT EXECUTE ON dbo.TempReleaseStateItemExclusive TO ASPState_20
GRANT EXECUTE ON dbo.TempInsertUninitializedItem TO ASPState_20
GRANT EXECUTE ON dbo.TempInsertStateItemShort TO ASPState_20
GRANT EXECUTE ON dbo.TempInsertStateItemLong TO ASPState_20
GRANT EXECUTE ON dbo.TempUpdateStateItemShort TO ASPState_20
GRANT EXECUTE ON dbo.TempUpdateStateItemShortNullLong TO ASPState_20
GRANT EXECUTE ON dbo.TempUpdateStateItemLong TO ASPState_20
GRANT EXECUTE ON dbo.TempUpdateStateItemLongNullShort TO ASPState_20
GRANT EXECUTE ON dbo.TempRemoveStateItem TO ASPState_20
GRANT EXECUTE ON dbo.TempResetTimeout TO ASPState_20
GRANT EXECUTE ON dbo.DeleteExpiredSessions TO ASPState_20
GRANT SELECT ON dbo.ASPStateTempSessions TO ASPState_20
GRANT SELECT ON dbo.ASPStateTempApplications TO ASPState_20
GRANT EXECUTE ON dbo.GetMajorVersion TO ASPState_20
GRANT EXECUTE ON dbo.CreateTempTables TO ASPState_20
GRANT EXECUTE ON dbo.TempGetVersion TO ASPState_20
GRANT EXECUTE ON dbo.GetHashCode TO ASPState_20
GRANT EXECUTE ON dbo.TempGetAppID TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItem TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItem2 TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItem3 TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItemExclusive TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItemExclusive2 TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItemExclusive3 TO ASPState_20
GRANT EXECUTE ON TYPE ::dbo.tSessionId TO ASPState_20
GRANT EXECUTE ON TYPE ::dbo.tAppName TO ASPState_20
GRANT EXECUTE ON TYPE ::dbo.tSessionItemShort TO ASPState_20
GRANT EXECUTE ON TYPE ::dbo.tSessionItemLong TO ASPState_20
GRANT EXECUTE ON TYPE ::dbo.tTextPtr TO ASPState_20

Answer 2

您只需要SQLServer上的datareader / datawriter。

ASP.Net会话状态SQL Server用户权限

2 个答案: