Re: Protecting database from administrators

From: Stephen Strong (anonymous_at_discussions.microsoft.com)
Date: 03/29/04 

Date: Sun, 28 Mar 2004 17:16:09 -0800

SQL Server IS secure. Anyone who tells you otherwise isn't addressing the issues appropriately. If someone CHOOSES to assign untrusted people with administration rights then no technology can protect them. This isn't a technology problem but a process problem. If your customers administrators choose to view/modify/steal your schema/sprocs etc (after you've licensed/sold it to them) then you have a licensing issue not a technology problem. What's to stop me stealing software and selling it on the world [black] market? Not much (license keys etc). "Security" is sometime more about process and rules (moral and legal) rather than technology. An appropriately configured SQL Server environment will resist the strongest electronic attacks. Analogue attacks are another issue.