Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.databases.ms-sqlserver > #1628

Re: 'Backup Database' permission

Show all headers | View raw

On Thursday, 5 December 2013 22:19:35 UTC, Erland Sommarskog  wrote:
> Chad Jones (noreply@noreply.com) writes:
> > Can any one tell me if it's possible to grant the 'Backup 
> > Database' permission to a user, but only for a disk location, 
> > not a tape device?  Thanks
> 
> I don't think so. SQL Server writes to the backup device using its own
> identity; it does not impersonate the actual user, so you cannot control
> it with direct permissions on the device either.

Trying to be helpful, can you do something with a stored procedure 
that only runs the backup in the way that you want to allow?  
Which isn't the question that was asked.

Reading between the lines, the objective may be to prevent 
unauthorised copying of data out of the system, or to make a 
rule book that describes how it is prevented.

Other ideas such as using the tape device on the standby server
and not giving a user the "backup database" permission on that 
server, come to mind.

Back to comp.databases.ms-sqlserver | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

'Backup Database' permission Chad Jones <noreply@noreply.com> - 2013-12-05 11:57 -0800
  Re: 'Backup Database' permission Erland Sommarskog <esquel@sommarskog.se> - 2013-12-05 23:19 +0100
    Re: 'Backup Database' permission rja.carnegie@gmail.com - 2013-12-05 16:14 -0800
      Re: 'Backup Database' permission Erland Sommarskog <esquel@sommarskog.se> - 2013-12-06 21:58 +0100
        Re: 'Backup Database' permission Chad Jones <noreply@noreply.com> - 2013-12-06 13:20 -0800
          Re: 'Backup Database' permission Erland Sommarskog <esquel@sommarskog.se> - 2013-12-06 23:41 +0100
            Re: 'Backup Database' permission Mark D Powell <Mark.Powell2@hp.com> - 2013-12-24 12:26 -0800

csiph-web