Re: sql database security

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Why would the someone that is not in the SA role try to block access to a
database. This sounds like you are trying to get around the IT department
and you don't have the proper permissions. That is exactly why you can't do
that in SQL Server.
--
bahados


"Kevin3NF" wrote:

> Someone else may step in, but I am not aware of any way to lock sa out of a
> database. SA is part of the sysadmin server role and cannot be removed.
> The sysadmin server role had rights to do anything in the installation and
> cannot be changed to the best of my knowledge.
>
> Yes, I was referring to having a different server, either on a different box
> or on a different instance on the same box
>
> --
> Kevin Hill
> President
> 3NF Consulting
>
> www.3nf-inc.com/NewsGroups.htm
>
> www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
>
> www.experts-exchange.com - experts compete for points to answer your
> questions
>
>
> "Min" <limsohmin@xxxxxxxxxxx> wrote in message
> news:668942E3-7E14-4E20-99DA-A00FF9C4C607@xxxxxxxxxxxxxxxx
> > Thanks for the information.
> > 1. Putting it on a different "server" means putting the database on a
> > different pc?
> > That doesn't solve my problem since the sa of that pc still can access the
> > database, right?
> >
> > 2. Is there any other solution to ONLY allow my application to open the
> > database and not any other personnel? Do I have to revert to sybase in
> > this
> > case?
> >
> > Min
> >
> >
> > "Kevin3NF" wrote:
> >
> >> You cannot lock the sa (or any user in the sysadmin server role) out of
> >> seeing a database by any method other than putting it on a different
> >> server.
> >>
> >> --
> >> Kevin Hill
> >> President
> >> 3NF Consulting
> >>
> >> www.3nf-inc.com/NewsGroups.htm
> >>
> >> www.DallasDBAs.com/forum - new DB forum for Dallas/Ft. Worth area DBAs.
> >>
> >> www.experts-exchange.com - experts compete for points to answer your
> >> questions
> >>
> >>
> >> "Min" <limsohmin@xxxxxxxxxxx> wrote in message
> >> news:8119E780-4015-45B0-BA34-E32A958072FD@xxxxxxxxxxxxxxxx
> >> > This is the first time I use SQL server for my application.
> >> > I need to set up 2 databases in the same server.
> >> >
> >> > 1. The first database need to be "hidden" hence no one else even SA
> >> > should
> >> > not be able to see the database except for my application.
> >> >
> >> > 2. The second database can be seen by SA
> >> >
> >> > Is this possible on SQL Server?
> >> >
> >> > Pls enlighten me as I have been trying various setting but in vain!
> >> > Min
> >> > ps: I think this can be done easily using sybase ASA. I just simply set
> >> > the
> >> > username and password.
> >> >
> >>
> >>
> >>
>
>
>
.

Relevant Pages

  • Re: sql database security
    ... I wanted a database that is hidden such that ONLY my application can access ... I just read about embedded sql. ... "Standard Security" is SQL server's default login security mode. ... SA is part of the sysadmin server role and cannot be removed. ...
    (microsoft.public.sqlserver.connect)
  • Re: You are not the owner specified for the object INFORMATION_SCHEMA...
    ... And it is not a member of sysadmin server role db_owner database ... trying to execute the following statement, ...
    (microsoft.public.sqlserver.programming)
  • Re: SQL User permissions
    ... Did you add this login to sysadmin server role? ... grant access to the db you would want ... I am new to SQL and I want to setup a database off my SQL server that ...
    (microsoft.public.sqlserver.security)
  • Re: problem after restore the database without the master
    ... I think it is because you are not a member of sysadmin server role ... Are you member of dbo_owner database role? ... > after restoring the database I can loging to the database with the user ...
    (microsoft.public.sqlserver.server)
  • Re: Restrict users to modify tabble structure
    ... Just make sure that they don't have such permissions/privileges in your database. ... sysadmin server role. ... Should not be dbo in the database. ... > Is it possible to restrict users to modify the table structure. ...
    (microsoft.public.sqlserver.server)