Re: Database Security Help!

From: Ron Talmage (rtalmage@prospice.com)
Date: 08/29/02 

From: "Ron Talmage" <rtalmage@prospice.com>
Date: Wed, 28 Aug 2002 21:44:47 -0700

Kueh,

You'll have to monitor what people are doing, and your best option is SQL
Trace, which can record Select commands as well as Insert, Update, and
Delete. You can define a trace to record all activity against sensitive
tables, and then monitor the results using Profiler or SQL if you've saved
the trace to a table.

But the best defense is to architect the applications so that they only call
stored procedures, so that users will not have direct access to tables.

Hope this helps,
Ron 

--
Ron Talmage
SQL Server MVP
"KA Kueh" <kka@ksm.com.my> wrote in message
news:Okb6PDxTCHA.1336@tkmsftngp11...
> Dear all,
>
> Is there a method or third party tool that allows me to monitor the usage
of
> MSSQL.  I want the tool to be able to report abnormal probing into the
> database.   I am trying to prevent stealing of information from eligible
> users.  These are user who are allowed to view, insert, edit and delete
> data.   I want to be able to know if someone amount them might be culling
> the database and might use it in ways that is not lawfull.   Thanks.
>
> Regards,
> Kueh.
>
>
Quantcast