DB Security

[DotNetNewbie]

Hi everyone,

I am writing a Vb.net app for our HR department and as you can imagine they are worried about other users accessing the HR Database. I have coded the app to only allow users who are authorised to use the app to log in. This is done by a table containing a list of users and thier rights.

However I also need to lockdown the Database as well to prevent anyone else accessing the tables.

Im guessing this can be done via creating/adding users to the Database. However I also need to set it up so that the SA account cannot access the DB either. But I still need to be able to backup the Database......

Is this possible?

Many thanks in advance

D.

 

[SQLBill]

Nope. Not really.

You can change the authentication mode to Windows Authentication Only. That will stop the SA account from being able to log in. However, the DBA(s) still need to have SYSADMIN privileges on the database or they can't do his/her/their job.

-SQLBill

 

[SQLBill]

By the way...one solution I heard was that the DBA told the decision makers that the only way to do this would be to put the database on another instance and only give that office access to it. That office would have to designate someone as a DBA and maintain the database on their own without assistance from the real DBA (since they weren't allowed access).

-SQLBill

 

[DotNetNewbie]

Thank Guys,

I did have a feeling that it was stretching the limits of DB security.

Again thanks

D.