Beginning Web Development, Silverlight, and ASP.NET AJAX

144
CHAPTER 6 ■ DEPLOYING YOUR WEB SITE
Figure 6-16. Configuring database users
At this point, Object Explorer shows the list of approved database users and their
associated login accounts that are configured to have access to the database. Windows
usernames will be prefixed by either the machine name or the domain name. So, users on
the domain MyDomain will appear as MYDOMAIN\username. Similarly, a user from a
machine called DBServer will be prefixed DBServer\username.
To add your new WebServiceUser login to the database, right-click the Users folder and
select New User. The Database Users – New dialog box will then appear (see Figure 6-17).
In this dialog box, you can (for this database only) change the user’s name by assigning
a different name to the user’s login account. This is known as aliasing. To avoid
confusion, I recommend keeping the database user access name the same as the user’s
SQL Server login name. For example, if you created a SQL Server user called WebService-
User, then you should also use WebServiceUser as the username for accessing the
database in the Database Users – New dialog box (as I’ve shown in Figure 6-17).
You’ll also need to assign the user a role or roles when you authorize them to access a
given database. For security reasons, I recommended you give them the minimum
amount of control that they need to get their job done. In this case, we know the web
service is just reading data, so the db_datareader role is selected.