Mark
New Member
Posts:5
 |
| 29 Aug 2011 04:49 PM |
|
Hi
I am seeing an error in the History for the Shrink Database task saying that the user doesn't have permission to run DBCC shrinkdatabase.
This seems fair enough because the IIS Apppool user that I created for the site is only a member of roles db_datareader, datawriter, ddladmin and securityadmin (as recommended by DNN Wiki and other blogs)
To run Shrink DB commands you need to be a member of a sysadmin or db_owner role, so is it true that to run this task I should be going against the security guidelines for setup of DNN?
|
|
|
|
|
Mark
New Member
Posts:5
|
| 29 Aug 2011 04:50 PM |
|
| and I meant to ask, what is the extra risk of making the IIS user a member or db_owner? |
|
|
|
|
Mitchel Sellers
Site Moderator
Basic Member
Posts:328
|
| 12 Nov 2011 08:55 AM |
|
Mark,
I'm sorry that I didn't see this, and the advice for not being db_owner is something I have not seen before, as many modules and other things required DBO permissions. |
|
-Mitchel Sellers, Microsoft C# MVP, MCITP
CEO
IowaComputerGurus Inc!
Visit my blog for helpful technical articles
For recommended products and services view the links to the right. |
|
|
Mark
New Member
Posts:5
|
| 13 Nov 2011 03:36 PM |
|
Hey Mitchel
I can't remember where I first read about not using db_owner but it was definately in a document similar to http://www.dotnetnuke.com/Resources/Wiki/Page/Hardening-your-database.aspx about hardening DNN installs.
Its also mentioned in the DNN Installation Guide pdf
But I guess this module is one of the cases that is mentioned as requiring full db_owner.
Ta |
|
|
|
|
Mitchel Sellers
Site Moderator
Basic Member
Posts:328
|
| 13 Nov 2011 03:47 PM |
|
Mark,
I'll be sure to update the manual with notes on permissions needed. |
|
-Mitchel Sellers, Microsoft C# MVP, MCITP
CEO
IowaComputerGurus Inc!
Visit my blog for helpful technical articles
For recommended products and services view the links to the right. |
|
|