April 22, 2011 at 10:15 am
I have developer's that are using visual studio 10.
Apparently there's a new feature that they can bring in SQL DB's schemas.
My dev's have asked if there's a way to restrict access in production to ONLY access the DB's schema.
In othere words no select, no read only, they want to be able to only pull the schema and no other access.
April 22, 2011 at 10:19 am
Grant them view definition rights.
However, I would honestly say that they should do that, like all other development work, on a dev database. Can be a backup/restore of prod, but should not be prod.
Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability
April 22, 2011 at 11:21 am
Agreed. Devs in production can lead to issues, if not now, later when the team grows or changes.
The reason you want them to not even read is probably because there is sensitive information in there. Perhaps you could make a job to backup/restore and cleanse the sensitive data and schedule it over night. Then, the dev team can pound away and test their queries with full access to a cleansed 'day old' copy of the database. They would also be able to troubleshoot most production issues via the copy!
Jim
Jim Murphy
http://www.sqlwatchmen.com
@SQLMurph
April 22, 2011 at 12:22 pm
Thanks guys for all the good info.
Good karma to you.
April 22, 2011 at 2:30 pm
[Jim].[dba].[Murphy] (4/22/2011)
The reason you want them to not even read is probably because there is sensitive information in there.
And even if you do grant them just view definition and no read permissions, do you know what impact it will have on Prod if they decie to refresh the schemas in the middle of the peak business day?
Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply