安全性：将存储过程转换为EF6

Question

I'm considering converting my project from using Sprox to linq (EF6), however I'm a bit concerned about DB permissions. At the moment I'm assigning explicitly rights to each and every procedure and nothing beyond that. How can I have a similar level of security with the use of dynamically created queries in EntityFramework?

Answer 1

You can set individual permissions up using the GRANT command in SQL.

eg

The following example grants SELECT permission to user RosaQdM on table Person.Address

GRANT SELECT ON OBJECT::Person.Address TO RosaQdM;

EF will have to respect the permissions granted, so whichever user that you are using in your application's connection string is the one you need to assign the appropriate permissions to.