RE: User rights and SOX

From: jaylou (jaylou_at_discussions.microsoft.com)
Date: 07/25/05

  • Next message: Scott Townsend: "Re: Web Applicaiton using Trusted Connections to SQL on different machine?" 
    Date: Mon, 25 Jul 2005 05:45:07 -0700

    Thank you!
    Good Idea... I didnt know if I was able to do that.

    Thanks again,
    joe

    "Mike Epprecht (SQL MVP)" wrote:

    > 1. Remove the BUILTIN\administrators group from SQL Server logins. The admins
    > then don't have any access. Then add the specific user with only the
    > permissions they need.
    >
    > 2. Don't use the SA account. Change it's password to something very
    > difficult and lock it away in a safe.
    >
    > Regards
    > --------------------------------
    > Mike Epprecht, Microsoft SQL Server MVP
    > Zurich, Switzerland
    >
    > MVP Program: http://www.microsoft.com/mvp
    >
    > Blog: http://www.msmvps.com/epprecht/
    >
    >
    >
    > "jaylou" wrote:
    >
    > > First question:
    > > I have a user that is admin on the server to perform security patches and
    > > general server maint. He is also a user in SQL. Since he is the Admin of
    > > the box he has also inherited Admin rights to SQL. I want him to have only
    > > "select,insert,update and delete" rights to all tables but no other rights in
    > > SQL.
    > > Is this possible?
    > >
    > > 2nd question:
    > > Has anyone out there needed to separate SQL functions for SOX? If so can
    > > you please give me some ideas of how you separated SA and DBO functions?
    > > SA(insert, update, delete)
    > > DBO (create tables,give user rights etc..)
    > > Thanks,
    > > Joe
    > >

  • Next message: Scott Townsend: "Re: Web Applicaiton using Trusted Connections to SQL on different machine?"

    Relevant Pages

    • Re: sort order
      ... Regards ... "Mike Epprecht (SQL MVP)" wrote: ... you are just lucky that in SQL ... > Mike Epprecht, Microsoft SQL Server MVP ...
      (microsoft.public.sqlserver.setup)
    • Re: Pass Through Query Question
      ... "Joe Williams" wrote in message ... > when you mentioned setting the connection string in the properties of the ... It runs with no problem using SQL query anlayzer. ...
      (microsoft.public.access.queries)
    • Re: Active Directory vs SqlServer which way to go?
      ... Why not just create a simple mapping between groups and application-specific ... roles and store it in SQL or web.config or whatever? ... That is essentially what AzMan is about, ... > Thx Joe for the response. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Is There a Better Way? (Incrementing PK Column)
      ... Joe, a pleasure to be "schooled" by the expert. ... I've read your SQL ... so I ended up putting a trigger on the ... It would sequence ...
      (microsoft.public.sqlserver.programming)
    • Re: Please help : System.Data.OleDb.OleDbException: Syntax error i
      ... Also Joe, be careful of using Date as a column name as well, I know you didn't use it here but I had to find out the hard way. ... They could easily put in malicious SQL for one of those values. ... The SQL string looks fine because I pasted the ... >> Dim objDataReader as OledbDataReader ...
      (microsoft.public.dotnet.framework.aspnet)