title: Handle sql-server permissions gracefully with Navision
body: <h3>Background</h3>
  <p>I am in the process of creating an application (referred to as MyApp) which must read data out from a SQL Server database handled by Navision. Navision users should to be able to use my application, without modifying permissions in the database.</p>
  <p>Navision's handling of permissions seems to be on the application layer. It performs the checking of permissions without storing them in the database.</p>
  <h3>Problem</h3>
  <p>Navision overwrites users, permissions, and other related objects in the database when synchronizing with the database, so the normal approach of creating a DB user and just using that won't work.</p>
  <h3>Possible Solution</h3>
  <p>What I think would be the most appropriate solution is to create a <code>MyApp</code> role in Active-Directory, which grants the necessary permissions on the DB, and add this role to all users.</p>
  <p>I do not know how to do this, or even if it's possible. Other solutions, or proposals, are welcome, but please only suggest solutions with can be managed from within ActiveDirectory or Navision.</p>
  <p>The server is an SQL Server 2008 server running Navison 5, and the client is Navision 6. I'm using Active Directory for Windows Server 2K8.</p>
  <p><strong>EDIT:</strong></p>
  <p>My app is a crate creating and designing application. It needs to read out the customers' names and IDs, and a few items in the items table, and that is why I need this functionality</p>