dbo role , backup command

Question

dbo role , backup command

deepa-658010

Old Hand

Points: 317
More actions
February 28, 2008 at 12:53 am

#187155

greetings all
am still new to all advanced administration in sql2000
am trying to trace this situatin
a shared DB server with default install
multiple dbs setup , per db one dbo mapped to unique security login
web server is seperate and uses asp/asp.net based web sites
yesterday i could locate the c:\ of db server is being filled with backup device files and as i checked logs i could see the db/client name
though its hard to find out the script he is using to run backup command ,
amy be some strored procedure as i can see more than 40 stored procesdured
can someone help me how can stop user from successfullt created these db backups on c or any other drive or revoke rights to let not them run backup command
Deepa

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply

Greg Charles SSC-Forever Points: 45403 More actions · Answer 1

Whoever is making the backups must be a member of the sysadmin server role, the db_owner database role, or the db_backupoperator database role. Remove anyone from those roles who doesn't really need those permissions.

Greg

Sugesh Kumar One Orange Chip Points: 27311 More actions · Answer 2

you can query the backset and backupmediaset to find you fired the backup and the take necessary actions. And check if there is a MP created to backup your databases daily.

Cheers,
Sugeshkumar Rajendran
SQL Server MVP
http://sugeshkr.blogspot.com

deepa-658010 Old Hand Points: 317 More actions · Answer 3

already checked there are no maintenance plans for such backup instances.

deepa-658010 Old Hand Points: 317 More actions · Answer 4

Hi Greg

this is shared DB server and whenever we create the Database we create its unique security login and map its as dbo.

webs ervers are differenet

the objective is to allow client hosting websites to ahve access to their database from outside and they shall eb able to update and do all db level tasks .

is this wrong way fo doing things ?

Greg Charles (2/28/2008)
Whoever is making the backups must be a member of the sysadmin server role, the db_owner database role, or the db_backupoperator database role. Remove anyone from those roles who doesn't really need those permissions.

Greg Charles SSC-Forever Points: 45403 More actions · Answer 5

It's wrong if you can't trust them to manage the database responsibly. Who is responsible for backups - you or the clients? If it's you, then you shouldn't be making the clients database owners. Just give them permissions they need to work with the data, not administrative permissions.

Greg