?
Solved

SQL Server Database and table structure prevent unauthorized access

Posted on 2011-03-03
2
Medium Priority
?
356 Views
Last Modified: 2012-08-13
Is there a way to prevent unauthorized access or even to view the table structure in a hosting server.
0
Comment
Question by:MadhuMenong
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 143

Expert Comment

by:Guy Hengel [angelIII / a3]
ID: 35027679
the hosting provider has DBA access to the db, so those people basically can see anything in your database (and you have no means to block that).

so, if it really has to be blocked to "anybody", don't "host" your database on a normal (web) hosting provider.
0
 
LVL 40

Accepted Solution

by:
lcohan earned 2000 total points
ID: 35028521
Aside of the hosting people that would have access to your server and implicit database, you should implement your own security model and you can read details about how to do that at the links below and I suggest and recommend create standard database role(s), then assign minimum rights on your DB objects to the role(s) and add user sql logins to the standard database role:

http://www.google.ca/url?sa=t&source=web&cd=1&ved=0CBkQFjAA&url=http%3A%2F%2Fdownload.microsoft.com%2Fdownload%2F8%2F5%2Fe%2F85eea4fa-b3bb-4426-97d0-7f7151b2011c%2FSQL2005SecBestPract.doc&ei=dr5vTZ3mLMaitgfIvpH-Dg&usg=AFQjCNFv2JoFJvPxIp1ArMuUJQSSwKKC4g

http://www.sqlsecurity.com/FAQs/SQLSecurityChecklist/tabid/57/Default.aspx

As you didn't mentioned what SQL server you are using please select the appropriate 200/2005/2008


0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently we ran in to an issue while running some SQL jobs where we were trying to process the cubes.  We got an error saying failure stating 'NT SERVICE\SQLSERVERAGENT does not have access to Analysis Services. So this is a way to automate that wit…
In part one, we reviewed the prerequisites required for installing SQL Server vNext. In this part we will explore how to install Microsoft's SQL Server on Ubuntu 16.04.
Via a live example, show how to set up a backup for SQL Server using a Maintenance Plan and how to schedule the job into SQL Server Agent.
Viewers will learn how to use the INSERT statement to insert data into their tables. It will also introduce the NULL statement, to show them what happens when no value is giving for any given column.

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question