Re: Can I deny select permission to members of Sysadmin role

From: Russell Fields (rlfields@sprynet.com)
Date: 07/01/02 

From: "Russell Fields" <rlfields@sprynet.com>
Date: Sun, 30 Jun 2002 21:27:40 -0400

FR

Sorry, sysadmin has it all. It is the demigod for SQL Server.

db_owner cannot be restricted in a database, it is the demigod for a
database.

See if you can shrink the list of people with access. For example, if you
are thinking of the programmers they could be db_owner on a development
server with little or no access to the production server containing the
sensitive data.

Russell Fields
"FR" <floydrev@hotmail.com> wrote in message
news:OKWwpzJICHA.1744@tkmsftngp13...
I would only wish for sa to basically have full control over all databases
which i guess it does , but can the sa deny permissions to perform any DML
statements on any table to a member that belongs to a system administrators
role or also to the db_owner role within that database to which the table
belong.

There is going to be some sensitive info in a table and hence want only 'sa'
to view it and the rest should not be able to access so no matter what high
priviliges they have on the server.

Pls. advice

Relevant Pages

  • Create SharePoint Portal failed.
    ... One mentioned ensuring that SQL Server uses a case ... 13:55:40 Service database server is 'USDC-JOHRIV'. ... Update dbo.propertylist set DisplayName = N'Last name' ...
    (microsoft.public.sharepoint.portalserver)
  • Re: ADO Connection Timeout
    ... to the central server, but you are willing to live with periods where it ... i.e. a local database or even a text file. ... to function until the connection can be restored to the server. ...
    (microsoft.public.data.ado)
  • Web Developers - Happy Hearts And HDTV! - Lockergnome
    ... Certificate on your MSIIS Web server. ... getting data from a database is only half the problem. ... Zend recently started a series about building rock solid code in PHP. ... which provides bulk database conversion. ...
    (freebsd-questions)
  • Config for OLTP system
    ... extrenal disks fo the 60GByte database server. ... IBM Informix Dynamic Server Configuration Parameters ... # BUFFSIZE - OnLine no longer supports this configuration parameter. ...
    (comp.databases.informix)
  • Re: TNS could not resolve the connect identifier
    ... This database resides on Machine A. ... The Web server is running on Machine B. ... Using tnsping is not as good as using a real connection such as via ... client (note that this is terminology that appears in the 10g R2 ...
    (comp.databases.oracle.server)