Re: how to secure a sql 2005 database?

thanks for the link. that's why i rather keep my stored procedures in my own source code, then pass it thru to sqlexec to execute.
i have greater control of it. executes just as fast.

i'm pretty paranoid about some of my creations, i develop apps to sell, not for clients to take over the database. so i need to protect my rights. its like quickbooks turning over their internal structures, which they really don't, but provide an api to export data out. i will do the same or just provide views for the user to use. that's what ADP does. you never see adp's internal structures.

so are you saying that i can't create a user and make that user the only valid user to get into the database, and unless you know the password, even admins, you cant open the database at all. i would hardcode the pwd in my program of course for it to open the tables.

what do you think?
Jay

Rick Byham, MS wrote:
You can encrypt the stored procedures so even the system administrators cannot see them. See example F at http://msdn2.microsoft.com/en-us/library/ms187926.aspx
Once encrypted you can't un-encrypt it, so you are responsible for having a backup of the procedure text.
.

Relevant Pages

  • Re: Execute Persmission denied on object sp_OACreate
    ... SQL Server doesn't check permissions on indirectly referenced objects as ... You can prevent ad-hoc execution of powerful master database procs while ... >I have a user who has execute permissions on a store procedure in a>database> which in turns executes 4 stored procedures in the master database. ...
    (microsoft.public.sqlserver.security)
  • Re: New user with no permissions can see and execute system stored procedures...
    ... Best regards ... But I can still see system views and stored procedures (though not system ... and map it to a database user and set its default schema to dbo. ... I have only tried to execute sys.sp_catalogs, but in my opinion a new ...
    (microsoft.public.sqlserver.security)
  • Re: Grant Execute right to the group of users
    ... Below is a script that will grant execute permissions to the specified role ... on all user procedures in the current database. ... > How could I grant the execute right to all stored procedures in a database for a group of users? ...
    (microsoft.public.sqlserver.programming)
  • Re: New user with no permissions can see and execute system stored procedures...
    ... map it to a database user and set its default schema to dbo. ... SQL Server Management Studio GUI) and execute _system_ stored procedures. ...
    (microsoft.public.sqlserver.security)
  • Re: New user with no permissions can see and execute system stored procedures...
    ... But I can still see system views and stored procedures (though not system ... map it to a database user and set its default schema to dbo. ... SQL Server Management Studio GUI) and execute _system_ stored ... I have only tried to execute sys.sp_catalogs, but in my opinion a new ...
    (microsoft.public.sqlserver.security)