September 8, 2003 at 7:49 am
Hi,
I have SQLServer installed on a machine as a “local System Account”
I do not really want the users to be able to see any of the tables or sprocs etc.So, I thought that the best way to do this would be to disable Enterprise manager, ie
(the only access that I want them to have is thru my application.)
Is there any way that I can set up a single login account that can open up EM, (for me), and disable it for all the other logins?
Any advice much appreciated.
yogiberr
September 8, 2003 at 8:16 am
Nope, best you can do is limit what they can do with the tool (which happens automatically based on whatever login they use).
Andy
September 8, 2003 at 12:35 pm
Hi Andy,
Thanks for the reply.
That's a bit of a bummer.I've been prowling for an article that focuses on setting up logins with minimal permissions , a sort of best practices..
has anyone found anything like this?
I'd be keen to hear.
many thanks.
yogiberr
September 8, 2003 at 1:01 pm
Not a simple problem. I basically try to gate all access through stored procs and I typically build the apps to use a sql login for the connection (hidden from the user). I've got a couple articles posted on sql logins, Brian Kelley has a bunch on security including a recent one on application roles.
Andy
September 8, 2003 at 3:04 pm
thanks bud,
i'll have a look.
cheers,
yogiberr
September 8, 2003 at 6:28 pm
quote:
I do not really want the users to be able to see any of the tables or sprocs etc.So, I thought that the best way to do this would be to disable Enterprise manager, ie(the only access that I want them to have is thru my application.)
Is there any way that I can set up a single login account that can open up EM, (for me), and disable it for all the other logins?
Unfortunately, users can also gain access to this information using Query Analyzer, MS Access, or anything else they can make a connection to SQL Server with. The problem has to do with the permissions given to the public role. I'll be writing an article at some point that details what you can revoke from the public role and what the consequences are.
K. Brian Kelley
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
K. Brian Kelley
@kbriankelley
September 12, 2003 at 8:23 am
Great,
Looking forward to it.
Cheers,
yogi
Viewing 7 posts - 1 through 6 (of 6 total)
You must be logged in to reply to this topic. Login to reply