Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.databases.ms-sqlserver > #1629

Re: 'Backup Database' permission

From Erland Sommarskog <esquel@sommarskog.se>
Newsgroups comp.databases.ms-sqlserver
Subject Re: 'Backup Database' permission
Date 2013-12-06 21:58 +0100
Organization Erland Sommarskog
Message-ID <XnsA28EDF7CCFC00Yazorman@127.0.0.1> (permalink)
References <l7qlqa$kfg$1@news.albasani.net> <XnsA28DED4A27680Yazorman@127.0.0.1> <bd083b75-e211-4de1-b6fb-a07f9d7842c5@googlegroups.com>

Show all headers | View raw


 (rja.carnegie@gmail.com) writes:
> Trying to be helpful, can you do something with a stored procedure 
> that only runs the backup in the way that you want to allow?  
> Which isn't the question that was asked.

I started to say something along these lines, but since you only need
a database permission to run BACKUP, I found that idea to be dead in
the water. Of course, I don't know Chad's situation, but it is not
uncommon that you have people on a server that are db_owner in a database
and whom you don't trust to do things on server level.
 
> Reading between the lines, the objective may be to prevent 
> unauthorised copying of data out of the system, or to make a 
> rule book that describes how it is prevented.

If you want to export data out of the house, using the tape station
which persumably physically quite well protected does not appear as
a good vehicle.
 

-- 
Erland Sommarskog, Stockholm, esquel@sommarskog.se

Back to comp.databases.ms-sqlserver | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

'Backup Database' permission Chad Jones <noreply@noreply.com> - 2013-12-05 11:57 -0800
  Re: 'Backup Database' permission Erland Sommarskog <esquel@sommarskog.se> - 2013-12-05 23:19 +0100
    Re: 'Backup Database' permission rja.carnegie@gmail.com - 2013-12-05 16:14 -0800
      Re: 'Backup Database' permission Erland Sommarskog <esquel@sommarskog.se> - 2013-12-06 21:58 +0100
        Re: 'Backup Database' permission Chad Jones <noreply@noreply.com> - 2013-12-06 13:20 -0800
          Re: 'Backup Database' permission Erland Sommarskog <esquel@sommarskog.se> - 2013-12-06 23:41 +0100
            Re: 'Backup Database' permission Mark D Powell <Mark.Powell2@hp.com> - 2013-12-24 12:26 -0800

csiph-web