Re: Permission to restore databases and access them without being
- From: LenaMsdn08 <LenaMsdn08@xxxxxxxxxxxxxxxx>
- Date: Sun, 10 Aug 2008 16:01:02 -0700
You're probably right. The databases they will be working with aren't
sensitive, but other databases on the test server are. Better safe than
sorry, I can just restore the databases for them as needed and assign access.
Thanks again for the help!
"Erland Sommarskog" wrote:
I think they answer is that they can't, and they shouldn't. To wit, they.
should not be able restore the backup of any those confidential databases,
and get access to them that way. So if they are not already a user of the
database they are restoring, RESTORE should fail.
This is a little difficult for me to test, but maybe it works if they
access the test box with their Windows login, and this Windows login is
already a user in the production database. But reasonably, they should only
be able to access the database with the same permission as they had one
the production machine.
A variation is that they bring over the backup to their local machine
where have sysadmin rights, restore the database, change the database
owner take a new dump and then move it to test.
Then again, this open the question whether they can freely copy files
around. A bit dubious given those confidential databases.
--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx
Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
- Follow-Ups:
- Re: Permission to restore databases and access them without being
- From: "Charles Wang [MSFT]"
- Re: Permission to restore databases and access them without being
- References:
- Permission to restore databases and access them without being sysa
- From: LenaMsdn08
- Re: Permission to restore databases and access them without being sysa
- From: Erland Sommarskog
- Permission to restore databases and access them without being sysa
- Prev by Date: Re: Permission to restore databases and access them without being sysa
- Next by Date: Re: Permission to restore databases and access them without being
- Previous by thread: Re: Permission to restore databases and access them without being sysa
- Next by thread: Re: Permission to restore databases and access them without being
- Index(es):
Relevant Pages
|