PHWinfo banniere

Titres
PORTAIL ANNUAIRE ARTICLES COMPARATEUR HÉBERGEURS DEVIS FORUMS RÉDUCTEUR D'URL
Précédent   PHWinfo > Forums Hébergement > Forum Hébergement serveur > ms.sqlserver.setup > Prevent users from viewing SQL procs and tables
S'inscrire FAQ Membres Recherche Messages du jour Marquer les forums comme lus
ms.sqlserver.setup Questions about SQL Server.

Prevent users from viewing SQL procs and tables

Réponse
 
LinkBack Outils de la discussion
Vieux 15/05/2008, 07h11   #1
Jay
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Prevent users from viewing SQL procs and tables

Hi,

I have an SQL Server 2000 database which I am going to install on a
Windows 2000/XP Workstation under SQL Server 2000 Personal Edition on
a client pc. There will be no other SQL databases on this pc and I
will the the only one using SQL.

This PC will be networked. The network administrator will have full
access to this PC but I have full control of over how SQL is setup.

I have an Excel based front-end (created by me) that will be used to
access this DB. This should
be the only way the user can access this database. There will be only
one user.

I don't want users to b able to view my procedures and also tables
using QA or Enterprise Manager.

What is the based and the simplest way to acheive this?

Thanks.
  Réponse avec citation
Vieux 15/05/2008, 09h37   #2
Jay
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: Prevent users from viewing SQL procs and tables

Actually, I have 5 to 10 procedures - which are critical - I can just
encrypt them. I guess, I can easily easily replace them with a new
procedure, if there is any code change or correction, right?

Alternatively,
Can I install SQL with only one SQL User (no windows account access).
And hard code this user in my front-end application. I will be the
only one who would know this username and password. Will this work???

Note that this will be a single user DB - no other DBs in this SQL
installation.
  Réponse avec citation
Vieux 15/05/2008, 20h07   #3
Rick Byham, \(MSFT\)
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: Prevent users from viewing SQL procs and tables

You have several things going on here.
If you want people to only be able use your Excel front end application, you
should use Application Roles. The password will only be as secure as your
Excel security, so that might not be best.
A better (or perhaps redundant) solution, is to keep the Business Rules on
SQL Server, so even if someone executes the stored procedure from Query
Analyzer, it will still behave correctly.
Last, if you don't control the client computer, you don't really control the
database. For instance an administrator on the client, could stop SQL
Server, copy the mdf file to another computer and attach the database to an
instance of SQL Server on which they have sysadmin permissions. Then they
own the database and can see the procedures.
Lastly, you can create the procedures using the WITH ENCRYPTION option, to
make it harder for people to see what's going on in the proc. That does not
offer complete security but can be part of defense in depth, and keep out
the curious.
--
Rick Byham (MSFT), SQL Server Books Online
This posting is provided "AS IS" with no warranties, and confers no rights.

"Jay" <jay6447@hotmail.com> wrote in message
news:9a55bf8e-b69c-4493-a026-77c2d7f08c45@j33g2000pri.googlegroups.com...
> Actually, I have 5 to 10 procedures - which are critical - I can just
> encrypt them. I guess, I can easily easily replace them with a new
> procedure, if there is any code change or correction, right?
>
> Alternatively,
> Can I install SQL with only one SQL User (no windows account access).
> And hard code this user in my front-end application. I will be the
> only one who would know this username and password. Will this work???
>
> Note that this will be a single user DB - no other DBs in this SQL
> installation.


  Réponse avec citation
Réponse


Outils de la discussion

Règles de messages
Vous ne pouvez pas créer de nouvelles discussions
Vous ne pouvez pas envoyer des réponses
Vous ne pouvez pas envoyer des pièces jointes
Vous ne pouvez pas modifier vos messages

Les balises BB sont activées : oui
Les smileys sont activés : oui
La balise [IMG] est activée : oui
Le code HTML peut être employé : non
Trackbacks are oui
Pingbacks are oui
Refbacks are oui


Fuseau horaire GMT +1. Il est actuellement 00h24.


Édité par : vBulletin® version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.2.0 RC5 Tous droits réservés.
Version française #16 par l'association vBulletin francophone
PHWinfo est un site Éducation Sans Frontières ©2000-2008
Ad Management by RedTyger
©Tous droits réservés par les parties respectives
Page generated in 0,35686 seconds with 11 queries