Securing the Direct Mailer Database

The Direct Mailer service uses the connection string specified in the Direct Mailer global resource to connect to the Direct Mailer database.

The first time the DirectMailer service is invoked, it creates the following tables in the Direct Mailer database:

• dml_attachments
• dml_job_errors
• dml_jobs

It also creates the Sp_create_dml_sqlagent_job stored procedure.

For each unique list involved in the Direct Mailer job, Direct Mailer creates a separate table in the Direct Mailer database, for example:

ML__13F0BA4B_AD15_45BD_AE07_E33DB423A076_

The following table lists the Direct Mailer database and other Direct Mailer tables, and whether the run-time account, design-time account, and the Direct Mailer service account require access to them.

Table name	Run-time user	Design-time user accounts	Direct Mailer service accounts
Direct Mailer database	No	No	db_owner role
dml_attachments	No	No	Select Insert Update
dml_job_errors	No	No	Select Insert Update
dml_jobs	No	No	Select Insert Update
ML_<GUID>	No	No	Select Insert Update

In addition, the Direct Mailer service must have Write permissions (ACLs) on the following files:

dml_drop
Winnt\system32\logfiles folders

Write permissions are required on these files so Direct Mailer can create and write to a log file, and send mails (it requires permissions to the drop location).

Important

• The Direct Mailer service can be on ComputerA and the Direct Mailer database can be in ComputerB. When a direct mail campaign item is created using Business Desk, a SQL Server Agent Job is created in the Direct Mailer database (ComputerB). According to the schedule of this job, the job calls the Direct Mailer service in ComputerA to actually process the mails.

  For this setup to work, Direct Mailer service also has to be installed in ComputerB. This install is just necessary for the SQL Server Agent job on ComputerB to communicate with the Direct Mailer service on ComputerA. The actual mail processing gets done only at ComputerA.

  You must purchase a Commerce Server license for SQL Server.

Direct Mailer Stored Procedure

The following table lists the Direct Mailer stored procedure, and whether run-time or design-time users should have access to it.

Stored procedure	Run-time user	Design-time user accounts	Direct Mailer service accounts
sp_create_dml_ sqlagent_job	No	Yes	Yes

See Also

Direct Mailer Service Account

Using Direct Mailer and Windows Authentication

Copyright © 2005 Microsoft Corporation.
All rights reserved.