Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.databases.ms-sqlserver > #1630

Re: 'Backup Database' permission

From Chad Jones <noreply@noreply.com>
Newsgroups comp.databases.ms-sqlserver
Subject Re: 'Backup Database' permission
Date 2013-12-06 13:20 -0800
Organization albasani.net
Message-ID <l7tf1v$53r$1@news.albasani.net> (permalink)
References <l7qlqa$kfg$1@news.albasani.net> <XnsA28DED4A27680Yazorman@127.0.0.1> <bd083b75-e211-4de1-b6fb-a07f9d7842c5@googlegroups.com> <XnsA28EDF7CCFC00Yazorman@127.0.0.1>

Show all headers | View raw


On 12/6/2013 12:58 PM, Erland Sommarskog wrote:
>   (rja.carnegie@gmail.com) writes:
>> Trying to be helpful, can you do something with a stored procedure
>> that only runs the backup in the way that you want to allow?
>> Which isn't the question that was asked.
>
> I started to say something along these lines, but since you only need
> a database permission to run BACKUP, I found that idea to be dead in
> the water. Of course, I don't know Chad's situation, but it is not
> uncommon that you have people on a server that are db_owner in a database
> and whom you don't trust to do things on server level.
>
>> Reading between the lines, the objective may be to prevent
>> unauthorised copying of data out of the system, or to make a
>> rule book that describes how it is prevented.
>
> If you want to export data out of the house, using the tape station
> which persumably physically quite well protected does not appear as
> a good vehicle.

Yes, I have no access to the tape backups or the tape backup 
device so that is not an option.  I do however have a full copy 
of SQL Server 2008 R2 running on my dev machine.  It is a 
trivial matter for me to restore a .bak file from another 
server on to my dev server.  Which is why I was asking about 
the 'Backup Database' permission.  I have full R/W on the other 
server but no 'Backup Database' permission.  I'm sure the dba's 
wouldn't give it to me if I asked for it because of the 
aforementioned restrictions on the tape device.  Even the dba's 
don't have full access to the tape device.  I was hoping that 
if they could give me permission to backup to disk only that 
would be the way to go.  I don't even want to ask these guys to 
run a script for me to backup to a disk location.  Whatever 
solution I find has to be something I can run myself.  Thanks

Back to comp.databases.ms-sqlserver | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

'Backup Database' permission Chad Jones <noreply@noreply.com> - 2013-12-05 11:57 -0800
  Re: 'Backup Database' permission Erland Sommarskog <esquel@sommarskog.se> - 2013-12-05 23:19 +0100
    Re: 'Backup Database' permission rja.carnegie@gmail.com - 2013-12-05 16:14 -0800
      Re: 'Backup Database' permission Erland Sommarskog <esquel@sommarskog.se> - 2013-12-06 21:58 +0100
        Re: 'Backup Database' permission Chad Jones <noreply@noreply.com> - 2013-12-06 13:20 -0800
          Re: 'Backup Database' permission Erland Sommarskog <esquel@sommarskog.se> - 2013-12-06 23:41 +0100
            Re: 'Backup Database' permission Mark D Powell <Mark.Powell2@hp.com> - 2013-12-24 12:26 -0800

csiph-web