Adding signature to trigger that executes a procedure on another DB

Hi,
There was a security issue with trigger executing a procedure on another DB. We found a solution that was based on module signing (adding signature from certificate etc.)
http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/Q_27844430.html
I can't find any clear guide to sign procedure / trigger and to make that work.

Can someone please help me?
lynqAsked:
Who is Participating?
 
lynqAuthor Commented:
As I've said in first post the general description of my problem (including error and my code) can be found here
http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/Q_27844430.html
We've found that this problem can be solved by using code signing.
What I want to get from experts is clear algorithm how to use code signing in this particular case. Or any other way to make my trigger work.
0
 
Scott PletcherSenior DBACommented:
Does the trigger actually need to wait for the procedure to execute?

Normally you don't want anything not absolutely required holding up a trigger, least of all something requiring cross-server communication.

Can you instead use a Service Broker message to alert the other server that code needs to be run on it?
0
 
lynqAuthor Commented:
I've been talking about cross-DB not cross-server communication.
Should I still use Service Broker?

<<Does the trigger actually need to wait for the procedure to execute?
Do you mean using WAITFOR inside trigger?
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
lynqAuthor Commented:
Will anyone help me?
0
 
lluddenCommented:
If you have two databases on the same server, you should be able to grant any procedure in any of the db's permission to execute from anywhere you need.  Are you getting an error or what.  Post some code and an exact message from the server.
0
 
lynqAuthor Commented:
Nobody helped
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.