Is this really the version you are looking for? Kentico Xperience 12 Service Pack Documentation is no longer updated. Use the switcher in the header to choose your product version.
Your web application should run with the smallest set of rights and permissions required for the application to function correctly. For example, a web application should NOT have access anywhere outside of the web application space. If attackers happen to find a flaw in the web application, at least they will not gain access to sensitive information stored on the server (for example the SAM database, where user passwords are stored).
You should explicitly ensure that:
Below you can find the minimal configurations for SQL and IIS user accounts required to work correctly with Kentico.
Instead of assigning SQL users to the db_owner database-level role, we recommend setting permissions according to the operations that the user account must perform:
Operations | Required permissions |
|---|---|
Actions related to browsing on the live website | Alter table or schema, Connect, Delete, Execute, Insert, Select, Update |
Managing of , , or |
Note: When using the MVC development model, this set of permissions is also required for the DB user of your MVC live site application if you wish to use certain features, such as the Form builder.
Alter schema, Connect, Create table, Create view, Delete, Execute, Insert, Select, Update |
Working with the Database objects application Only required for the DB user of the Kentico administration application when using the MVC development model. | Connect, Create procedure, Delete, Execute, Insert, References, Select, Update |
Creating a database Only required for the DB user of the Kentico administration application when using the MVC development model. | Alter, Connect, Delete, Execute, Insert, References, Select, Update |
To limit the permissions for an SQL user, you have to first create a new SQL login in SQL Management Studio, map it to the database and then assign the permissions for this login. For information about creating logins in SQL Management Studio, see Create a Login (opens in a new tab).