Hi,
I have a sql server database.
How can client applications get data out of the database without having to
supply a username and password?
e.g I would like to write an api interface with my own username/password
authentication to allow access to certain areas.
Thanks
JJ

If you use SQL Server security then a password is required, although it can
be blank (not recommended). You should take a look at Application Roles (see
Books Online for details) or use Integrated security.

You will presumably then want to secure your SQL Server such that users can
only access it through your middle tier. Providing an application API alone
won't stop users from bypassing your security and connecting to the database
with tools like Query Analyzer.

--
David Portas
SQL Server MVP
--

If you use Integrated security then you can have it validate against Active
Directory. No password or userid necessary.

[quoted text, click to view]