User ID in SQL

[Mungovan]

Hi,

I need to save a user's NT ID into a table. Is there a way to automatically detect who is logged onto the system and then use this information in the server.

Kind regards,
Delcan

 

[gmmastros]

Just to get you started....

select user_id(), suser_id(), suser_name(), user_name(), Session_User, system_user, suser_sname()

Books on line is your friend.

-George

"The great things about standards is that there are so many to choose from." - Fortune Cookie Wisdom

 

[SQLSister]

George gave you the possibilities, you will need to read up in BOL to see whcihc one will give you exactly what you want as there are differnces between them.

"NOTHING is more important in a database than integrity." ESquared

 

[Mungovan]

Hey guys,

Thanks for the info that was great. I was looking at the BOL and couldn't find exactly what I'm looking for. Essentially I need to insert the machine name of the current user (because all user's will be logged onto the system as sa.)

Kind regards,
D

 

[gmmastros]

>> (because all user's will be logged onto the system as sa.)

This is a super bad idea.

-George

"The great things about standards is that there are so many to choose from." - Fortune Cookie Wisdom

 

[SQLDenis]

select host_name() will give you the machine name

Denis The SQL Menace
--------------------
SQL Server Code,Tips and Tricks, Performance Tuning
SQLBlog.com, Google Interview Questions

 

[SQLDenis]

and like the wise George said "This is a super bad idea. '

yes sa is very bad

Denis The SQL Menace
--------------------
SQL Server Code,Tips and Tricks, Performance Tuning
SQLBlog.com, Google Interview Questions

 

[SQLSister]

No one should ever log in as sa who is not an admin. This gives all rights to do anything to the system including dropping tables. If you ever have a sql injection attack (a distinct probablility if you are that lax about security, then you probably haven;t protected against this either.) then the person will have unlimited rights onyour database. Very very bad idea. ANd not only hackers are a problem. Do you really want disrguntled users to have full rights to the database?

"NOTHING is more important in a database than integrity." ESquared

 

[Mungovan]

Hi, thanks for the advice again. It' necessary in our system to have all users logged in as this for operational reasons. The Access front-end has it pretty safe.

Just on the last point, the function host_name() returns the name of the SQL server that the user's are connected to, rather than the name of the machine that the user's client session is running.

Cheers,
D

 

[ca8msm]

It' necessary in our system to have all users logged in as this for operational reasons.

It's never necessary to log all users in as sa, that's just a very poor setup.

The Access front-end has it pretty safe.

It's "pretty" safe? So you're not entirely sure? There's never any reason to assume that your system isn't susceptible to attack so you should always protect yourself as much as you can. Using the sa account is possibly the worst method you could use in this case.


-------------------------------------------------------

Mark,
[URL unfurl="true"]http://aspnetlibrary.com[/url]
[URL unfurl="true"]http://mdssolutions.co.uk[/url] - Delivering professional ASP.NET solutions
[URL unfurl="true"]http://weblogs.asp.net/marksmith[/url]