RE: How can I audit when a Trigger is disabled???
From: Mark Allison (marka_at_no.tinned.meat.mvps.org)
Date: 05/12/05
- Next message: Mark Allison: "RE: How can I tell if a user has EXEC permission for a stored procedur"
- Previous message: Cindy Gross: "RE: permissions hierarchy"
- In reply to: MCSA_Todd: "How can I audit when a Trigger is disabled???"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 12 May 2005 09:00:12 -0700
Todd,
Can you lock down the database a bit more? ALTER TRIGGER requires ddl_admin
or db_owner privileges. Don't give users this level of access and they won't
be able to disable the trigger, just give them the minimum rights to do what
they need to do.
SQL Server 2005 has DDL triggers, but there's nothing in SQL Server 2000
that will allow auditing of this. I'm not actually sure if SQL Server 2005
can do it either.
-- Mark Allison, SQL Server MVP http://www.markallison.co.uk Looking for a SQL Server replication book? http://www.nwsu.com/0974973602m.html "MCSA_Todd" wrote: > We are running SQL Server 2000 and are having a problem with database data > being changed. We have a trigger which logs when changes are made and what > the old and new data is. I really need to know if or when someone is > disabling that trigger and changing data. It is possible that the trigger is > being disabled and then the data is being changed and I would like that even > logged and then an operator notified by email. > > Any ideas? > > Thanks! > > Todd
- Next message: Mark Allison: "RE: How can I tell if a user has EXEC permission for a stored procedur"
- Previous message: Cindy Gross: "RE: permissions hierarchy"
- In reply to: MCSA_Todd: "How can I audit when a Trigger is disabled???"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
