Restrict Key to SA only in SQL 2005



I have data that I want to encrypt and have the key avaiable to SA
users only. How can I revoke (or prevent) DBO from using the key? I
tried

deny view definition on symmetric key::SSKey to dbo

and got...

Cannot grant, deny, or revoke permissions to sa, dbo,
information_schema, sys, or yourself.

Any suggestions?

Jim

.



Relevant Pages

  • Re: How to hide INFORMATION_SCHEMA and sys from users
    ... at the database level but it is without any effect. ... The user still can see all the dbo, ... hongju a écrit : ... Revoke and Deny of various permissions does not seem to be working ...
    (microsoft.public.sqlserver.security)
  • Re: How to prevent DELETEs in a table
    ... What you say about dbo is true, but it is even MORE true about someone who ... is in the sysadmin role. ... No permissions are ever checked for someone in the ... the deny is not applied. ...
    (microsoft.public.sqlserver.server)
  • Re: How to DENY SELECT permissions?
    ... You cannot DENY from sysadmin. ... "Lawrence" wrote in message ... > I'm dbo & sysadmin on this table that I'm trying to take away SELECT permission. ...
    (microsoft.public.sqlserver.programming)
  • Re: DENY ALL for all tables
    ... To the best of my knowledge the default is NO permissions. ... > but it only works on tables belonging to the dbo owner. ... > one table at a time like DENY ON owner.tablename TO ...
    (microsoft.public.sqlserver.security)
  • How to DENY SELECT permission?
    ... I am dbo and sysadmin on this table that i'm trying to deny SELECT permission. ...
    (microsoft.public.sqlserver.programming)