January 4, 2003 at 6:53 am
Hello everybody,
I want to protect de Store Procedures code for a only reader data user because I can see it in the Analizer.
I don't want to use the "With Encrypt" script on the creation, because I can't the maintein of the DB.
Can you help me?.
Thanks in advance.
January 7, 2003 at 8:00 am
This was removed by the editor as SPAM
January 7, 2003 at 8:32 am
You can limit their access to syscomments which will contain the text of the proc. The proc encryption is very breakable, only helps to deter casual looking - and as a DBA I'm not fond of seeing it used at all, makes it that much harder to tune since I have to find the source.
Andy
January 7, 2003 at 9:20 am
I agree with Andy on this one. But be aware of stored procedures like sp_helptext as well.
WITH ENCRYPT is a band-aid and besides, it's really annoying if you have to debug or troubleshoot an issue.
K. Brian Kelley
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1
K. Brian Kelley
@kbriankelley
January 7, 2003 at 11:02 am
Short answer is you can't unless you control the administrative access to the server.
You can remove select from syscomments (and insert, update, etc), for public and general users, but the encrypt stuff isn't protection, it's an annoyance. A script on this site will break it if you can read syscomments.
Steve Jones
January 11, 2003 at 8:39 am
thanks for your answers.
Robert
January 11, 2003 at 8:47 am
Just as an FYI check out on Planet-Source-Code, a script has been posted that uses the ALTER PROC command captures the before and after effect and demasks any SP under 4000 bits long. It is quite interesting.
January 14, 2003 at 11:47 am
Hi Antares686
Do you have the URL for that site please 🙂
paul
paul
January 14, 2003 at 2:59 pm
Ok first a little bit of disclaimer since of course this can be used for malicious intent.
The information provided is done so for educational purposes only. I in no way condone the use of this to retrieve any code not belonging to the respective user. Nor do I make guarantee this will work for all circumstances without potientially breaking existing code (keep that in mind).
Here you go.
http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=505&lngWId=5
Viewing 9 posts - 1 through 8 (of 8 total)
You must be logged in to reply to this topic. Login to reply