Re: How to secure the DB on a customer SQL server

From: Bruce A. Carson (bcarson_at_asgoth.com)
Date: 07/17/03

  • Next message: gpayne: "Service Start Up Problems Solved"
    Date: Thu, 17 Jul 2003 10:56:34 -0400
    
    

    The question about securing data seems to come up a lot... As answered by
    other posters there is no way
    to secure your data if someone has the "sa" password. Stored procedures are
    another matter - you can stop
    people from viewing them by encrypting them: Just add "WITH ENCRYPTION" to
    your create proc statement. This does not stop someone from completely
    replacing the proc with another one, however.

    Bruce

    "Reinier" <R_Gugten@hotmail.com> wrote in message
    news:0c3101c34ba9$256443b0$a401280a@phx.gbl...
    > Hi there,
    > I develop a software prog. that uses the SQL server. I
    > want to give access rights to the SQL depending on how the
    > uses loggs onto my software. I do not want anyone to be
    > able to change data in my database or to view/edit my
    > stored procedures.
    > Can anyone help me out here?
    >
    > Thansk.
    >
    > Reinier.


  • Next message: gpayne: "Service Start Up Problems Solved"

    Relevant Pages

    • Re: hooking into sql server file I/O -- file level encryption
      ... The key is associated with the user who does the encrypting so if you're not encrypting while logged in as the domain user that sqlservr.exe executes as, SQL won't be able to read the file. ... This was what the SQL Server had to ... Books Online for SQL Server 2005 at ...
      (microsoft.public.sqlserver.security)
    • Re: SQL Server 2000 / 2005 Encryption
      ... So here is how I think we can accomplish this. ... Once it is on the Tablet, does Excel just know to use this certificate ... You're talking about encrypting the connection to SQL Server, ... The certificates used to encrypt your data stored on SQL Server 2005 and to ...
      (microsoft.public.sqlserver.security)
    • Re: "application role" activation
      ... SQL Server, the application role becomes inactive again. ... ----Activate an application role without encrypting the password ... This example activates an application role named SalesAppRole, ... plaintext password AsDeFXX, ...
      (microsoft.public.sqlserver.security)
    • Re: Obfuscating SQL stored procs
      ... of SQL Server. ... You could have one large text file containing all stored procedure ... For a good user and performance monitor, check DBMonitor ... but I did say that I would be encrypting the ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: Obfuscating SQL stored procs
      ... of SQL Server. ... You could have one large text file containing all stored procedure ... For a good user and performance monitor, check DBMonitor ... but I did say that I would be encrypting the ...
      (microsoft.public.sqlserver.msde)