User Define Roles and cross database queries

[tdudley]

We maintain a few applications that query multiple databases on our server. We also have groups of users that multitask using different applications.

I've always created a Role in each database for every application.

Wondering if someone is in two Roles at once will we have security conflicts?

[skhanal]

Privileges are used on per connection basis, if two different applications are using different roles the privileges granted will not be combined.

You should not have any problems.

[rmiao]

If user belongs two roles, the user has permissions defined in both roles as long as there is no specific deny access.

[tdudley]

Thank you!

[skhanal]

I assumed two applications are using two different login accounts. So privileges used by two applications are independent of each other. You can run multiple instances of each application without any conflict.

As rmiao said, there should be no problem unless you have a Deny privilege.