January 13, 2005 at 8:06 am
Discourage is a good word here, just like "impede" when talking about how to keep system administrators out of a clustered SQL Server. However, if there is a rule that says DBAs should not view, I'd not take this approach. Sooner or later someone will come along, especially if the data is sensitive, and figure out the schema. It's typically not very hard. I do it all the time with the 3rd party products we want to interface with and while it may be a little time-consuming, it's far from difficult.
K. Brian Kelley
@kbriankelley
January 13, 2005 at 8:18 am
Indeed, it is like a fence. It prevents most from coming in, but soner or later, someone will jump over it.
Keep your DRP in mind when you choose a datasecurity mechanism !
If you have tight sla's, and you haven encrypted data any way, your sysadms can only restore "stuff", but will not be able to help with data-checks at db-system-level afterward.
If you don't trust your sysadms regarding deontology, kick them out !
Johan
Learn to play, play to learn !
Dont drive faster than your guardian angel can fly ...
but keeping both feet on the ground wont get you anywhere :w00t:
- How to post Performance Problems
- How to post data/code to get the best help[/url]
- How to prevent a sore throat after hours of presenting ppt
press F1 for solution, press shift+F1 for urgent solution 😀
Need a bit of Powershell? How about this
Who am I ? Sometimes this is me but most of the time this is me
Viewing 2 posts - 16 through 16 (of 16 total)
You must be logged in to reply to this topic. Login to reply