all groups > sql server (alternate) > april 2005 >
You're in the

sql server (alternate)

group:

don't permit manual access to database


Re: don't permit manual access to database Erland Sommarskog
4/29/2005 12:00:00 AM
sql server (alternate):
Ricardo74 (rpeinadorgz@gmail.com) writes:
[quoted text, click to view]

You can use an application role, so that users themselves does not
have any access. The application then emits sp_setapprole with a
password embedded in the application. You should have granted
all the required access to the application role.

There are two catches here:
1) You would have to turn off connection pooling, since connection
pooling does not play well with application roles.
2) Anyway with admin priviledges can access the database anyway.


--
Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se

Books Online for SQL Server SP3 at
don't permit manual access to database rpeinadorgz NO[at]SPAM gmail.com
4/29/2005 12:51:11 AM
I've got a java application that connects to a sql server 2000
database.
The application must access with total permissions to database but I
don't want that anybody can insert or delete data with the corporative
administrator of sql server 2000.
How can I lock the corporative administrator in order to not permit
manual manipulation but my application can work properly?
Re: don't permit manual access to database Simon Hayes
4/29/2005 2:53:08 AM
There's no way to prevent a sysadmin from accessing a database. You
don't say why you want to do this, but if it's to stop someone seeing
sensitive data, then encryption is probably the best solution:

http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22

Simon
AddThis Social Bookmark Button