Re: security in development environnement

From: BP Margolin (bpmargo@attglobal.net)
Date: 02/16/03 

From: "BP Margolin" <bpmargo@attglobal.net>
Date: Sun, 16 Feb 2003 13:51:15 -0500

Sylvain,

Just to mention however, that using the suggestion in my previous post, your
developers will NOT be able to create stored procedure owned by "dbo". It is
recommended that all procedures, in a production environment, be owned by
"dbo".

-------------------------------------------
BP Margolin
Please reply only to the newsgroups.
When posting, inclusion of SQL (CREATE TABLE ..., INSERT ..., etc.) which
can be cut and pasted into Query Analyzer is appreciated.

"Sylvain" <junesyl@statcan.ca> wrote in message
news:01c801c2d565$8e4c3f50$a401280a@phx.gbl...
> I am a new DBA and wondering how can I keep the control of
> the database objects like tables in a developpement
> environnement using the SQLSEVER security.
>
> I have created the database and tables. Developpers need
> to create procedure in the database and full access to the
> data.
>
> I do not want to give them the database role db_owner
> because they can modify all database objects including
> tables.
>
> I have given the database roles db_datareader and
> db_datawriter to the developper and the permission of
> procedure creation on the database.
>
> Developpers are able to manage all data but not able to
> create procedure associate with the owner DBO.
>
> Is there a way to give permission other than db_owner ?
>
> IF there is no other option that given db_owner
> permission, how can I control objects to make sure no bad
> modification will be done on the tables.
>
> thanks all
>
>

Relevant Pages

  • Re: security in development environnement
    ... I would suggest that you use a version control system to hold the SQL to ... Therefore you can track changes and who does them. ... > the database objects like tables in a developpement ... > Developpers are able to manage all data but not able to ...
    (microsoft.public.sqlserver.security)
  • security in development environnement
    ... I have created the database and tables. ... because they can modify all database objects including ... Developpers are able to manage all data but not able to ... how can I control objects to make sure no bad ...
    (microsoft.public.sqlserver.security)
  • Re: Change dbo
    ... I have a database where a user is defined as the dbo on a database. ... I tried using SQL Server Manger ... The login for this person maps to dbo. ...
    (microsoft.public.sqlserver.security)
  • Re: Developer design Best Practices
    ... > test - they develop them and then I move them, and the owner is dbo. ... > There is NO DBO User in our dev database!! ... just means it is owned by the database owner, ... to have a busy dba monitoring development servers. ...
    (microsoft.public.sqlserver.server)
  • Re: db_owner role in SQL 2k
    ... I do the select user_nameand get dbo ... Do you mean EM lists VDW as the owner of the database? ... I presume then that you are logged in as tfs. ... So my guess is that the login tfs is in the sysadmin role on the server, ...
    (microsoft.public.sqlserver.programming)