Re: Not using SA - Then what?

From: lindawie (lindawie@my-deja.com)
Date: 05/31/02


From: "lindawie" <lindawie@my-deja.com>
Date: Fri, 31 May 2002 08:35:09 -0700


Chris,

> I have read that people should not be using SA for anything. How then
> do I have multiple developers/managers login to enterprise manager
> etc but have all the objects owned by dbo (we each have diff NT
> logins)? If SA is stored in clear text in some situations, wouldn't
> all uid/pswrd combo's appear in clear text?
>
> We have wrestled with people making and therefore owning objects, and
> causing headaches in the past...

Change the SA password and don't give it to anyone.

You can add developers to the db_owner role and use Windows
authentication.
Any objects they create will be owned by dbo.

A much better approach is to have developers write scripts to create all
objects and then you execute the scripts either in Query Analyzer or
in batch using osql.

Linda



Relevant Pages

  • Re: Not using SA - Then what?
    ... >> You can add developers to the db_owner role and use Windows ... >> Any objects they create will be owned by dbo. ... >>> do I have multiple developers/managers login to enterprise manager ... >> A much better approach is to have developers write scripts to create all ...
    (microsoft.public.sqlserver.security)
  • Re: Not using SA - Then what?
    ... > authentication. ... >> etc but have all the objects owned by dbo (we each have diff NT ... > You can add developers to the db_owner role and use Windows ... > A much better approach is to have developers write scripts to create all ...
    (microsoft.public.sqlserver.security)
  • Re: deny truncate?
    ... > They do not need to be dbo to execute a dbo owned stored procedure. ... > GRANT EXECUTE ON dbo.YourProcName TO DeveloperNameGoesHere ... amount of developers, only 5 - in fact there's twice as many servers than ...
    (microsoft.public.sqlserver.programming)
  • Re: deny truncate?
    ... > They do not need to be dbo to execute a dbo owned stored procedure. ... > GRANT EXECUTE ON dbo.YourProcName TO DeveloperNameGoesHere ... amount of developers, only 5 - in fact there's twice as many servers than ...
    (microsoft.public.sqlserver.security)
  • Re: Is this really the best way?
    ... if they were the dbo. ... ROT13 my email address to reply: ... >> Our SQL developers authenticate via Windows NT. ... >> their stored procedure calls with the same schema. ...
    (microsoft.public.sqlserver.security)