How to restrict SELECT permission for sysadmin users... SQL server 2000

  • Discourage is a good word here, just like "impede" when talking about how to keep system administrators out of a clustered SQL Server. However, if there is a rule that says DBAs should not view, I'd not take this approach. Sooner or later someone will come along, especially if the data is sensitive, and figure out the schema. It's typically not very hard. I do it all the time with the 3rd party products we want to interface with and while it may be a little time-consuming, it's far from difficult.

    K. Brian Kelley
    @kbriankelley

  • Indeed, it is like a fence. It prevents most from coming in, but soner or later, someone will jump over it.

    Keep your DRP in mind when you choose a datasecurity mechanism !

    If you have tight sla's, and you haven encrypted data any way, your sysadms can only restore "stuff", but will not be able to help with data-checks at db-system-level afterward.

    If you don't trust your sysadms regarding deontology, kick them out !

    Johan

    Learn to play, play to learn !

    Dont drive faster than your guardian angel can fly ...
    but keeping both feet on the ground wont get you anywhere :w00t:

    - How to post Performance Problems
    - How to post data/code to get the best help[/url]

    - How to prevent a sore throat after hours of presenting ppt

    press F1 for solution, press shift+F1 for urgent solution 😀

    Need a bit of Powershell? How about this

    Who am I ? Sometimes this is me but most of the time this is me

Viewing 2 posts - 16 through 16 (of 16 total)

You must be logged in to reply to this topic. Login to reply