Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

ASP.Net Session State SQL Server user permissions

What are the minimum set of permissions necessary for an ASP.net application to be able to read/write into the standard persisted SQL Server session state database?

like image 583
user884140 Avatar asked Nov 26 '22 10:11

user884140


1 Answers

I know this question is a little old, but I didn't see a correct answer. Here is what we granted to the role we created to replace the built-in ASPState account. We didn't want the account used by our web apps to have .dbo permission for security reasons.

GRANT EXECUTE ON dbo.TempReleaseStateItemExclusive TO ASPState_20
GRANT EXECUTE ON dbo.TempInsertUninitializedItem TO ASPState_20
GRANT EXECUTE ON dbo.TempInsertStateItemShort TO ASPState_20
GRANT EXECUTE ON dbo.TempInsertStateItemLong TO ASPState_20
GRANT EXECUTE ON dbo.TempUpdateStateItemShort TO ASPState_20
GRANT EXECUTE ON dbo.TempUpdateStateItemShortNullLong TO ASPState_20
GRANT EXECUTE ON dbo.TempUpdateStateItemLong TO ASPState_20
GRANT EXECUTE ON dbo.TempUpdateStateItemLongNullShort TO ASPState_20
GRANT EXECUTE ON dbo.TempRemoveStateItem TO ASPState_20
GRANT EXECUTE ON dbo.TempResetTimeout TO ASPState_20
GRANT EXECUTE ON dbo.DeleteExpiredSessions TO ASPState_20
GRANT SELECT ON dbo.ASPStateTempSessions TO ASPState_20
GRANT SELECT ON dbo.ASPStateTempApplications TO ASPState_20
GRANT EXECUTE ON dbo.GetMajorVersion TO ASPState_20
GRANT EXECUTE ON dbo.CreateTempTables TO ASPState_20
GRANT EXECUTE ON dbo.TempGetVersion TO ASPState_20
GRANT EXECUTE ON dbo.GetHashCode TO ASPState_20
GRANT EXECUTE ON dbo.TempGetAppID TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItem TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItem2 TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItem3 TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItemExclusive TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItemExclusive2 TO ASPState_20
GRANT EXECUTE ON dbo.TempGetStateItemExclusive3 TO ASPState_20
GRANT EXECUTE ON TYPE ::dbo.tSessionId TO ASPState_20
GRANT EXECUTE ON TYPE ::dbo.tAppName TO ASPState_20
GRANT EXECUTE ON TYPE ::dbo.tSessionItemShort TO ASPState_20
GRANT EXECUTE ON TYPE ::dbo.tSessionItemLong TO ASPState_20
GRANT EXECUTE ON TYPE ::dbo.tTextPtr TO ASPState_20
like image 87
Glade Mellor Avatar answered Nov 27 '22 22:11

Glade Mellor