Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. Database & SysAdmin
  3. Database
  4. How to secure a database?

How to secure a database?

Scheduled Pinned Locked Moved Database
databasesql-serversysadminsecuritytutorial
8 Posts 4 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K Offline
    K Offline
    Kujtim Hyseni
    wrote on last edited by
    #1

    Hi, I want to secure a database in SQL Server 2008. Here is the situation description: I am using both 'windows' and 'sa' authentication. When I create a database (logged as 'windows' authenticated) I can see and change it (create tables, stored procedures) from logged as 'sa' authentication or vice versa. So, there is no difference whether I create it logged as 'windows' or 'sa'. But, what I need is to secure a particular database i.e. even if I am logged as 'windows' I want the particular database to be accessed only by providing a username and password. Do you have any idea how to resolve this?

    L J 2 Replies Last reply
    0
    • K Kujtim Hyseni

      Hi, I want to secure a database in SQL Server 2008. Here is the situation description: I am using both 'windows' and 'sa' authentication. When I create a database (logged as 'windows' authenticated) I can see and change it (create tables, stored procedures) from logged as 'sa' authentication or vice versa. So, there is no difference whether I create it logged as 'windows' or 'sa'. But, what I need is to secure a particular database i.e. even if I am logged as 'windows' I want the particular database to be accessed only by providing a username and password. Do you have any idea how to resolve this?

      L Offline
      L Offline
      Lost User
      wrote on last edited by
      #2

      Can't be done; the Administrator of the local computer is considered to be the owner of his/her data. Alternatively, you might consider another database, or hosting your server on a different machine than the users'.

      Bastard Programmer from Hell :suss:

      K 1 Reply Last reply
      0
      • L Lost User

        Can't be done; the Administrator of the local computer is considered to be the owner of his/her data. Alternatively, you might consider another database, or hosting your server on a different machine than the users'.

        Bastard Programmer from Hell :suss:

        K Offline
        K Offline
        Kujtim Hyseni
        wrote on last edited by
        #3

        Can you give any details (how to consider another database)?

        L 1 Reply Last reply
        0
        • K Kujtim Hyseni

          Can you give any details (how to consider another database)?

          L Offline
          L Offline
          Lost User
          wrote on last edited by
          #4

          Kujtim Hyseni wrote:

          Can you give any details (how to consider another database)?

          A comparison on databases can be found here[^]. Both MySQL and Oracle provide free alternatives that may fit your requirements.

          Bastard Programmer from Hell :suss:

          K 1 Reply Last reply
          0
          • L Lost User

            Kujtim Hyseni wrote:

            Can you give any details (how to consider another database)?

            A comparison on databases can be found here[^]. Both MySQL and Oracle provide free alternatives that may fit your requirements.

            Bastard Programmer from Hell :suss:

            K Offline
            K Offline
            Kujtim Hyseni
            wrote on last edited by
            #5

            You didn't provided solution, that is just an article of capabilities. I need short and precise guide. By the way, I don't use MySQL nor Oracle.

            L 1 Reply Last reply
            0
            • K Kujtim Hyseni

              You didn't provided solution, that is just an article of capabilities. I need short and precise guide. By the way, I don't use MySQL nor Oracle.

              L Offline
              L Offline
              Lost User
              wrote on last edited by
              #6

              Kujtim Hyseni wrote:

              You didn't provided solution, that is just an article of capabilities.

              I don't have to provide a solution. I'm not at work, this 'advice' is being given in my own spare time. I could be doing something productive, like the dishes, but I had chosen to answer this question. Might benefit someone, and I'm sure the dishes do not mind waiting :)

              Kujtim Hyseni wrote:

              I need short and precise guide.

              You already have - it's called the documentation[^]. Right on the first lines, it states short and precise;

              There are two possible modes: Windows Authentication mode and mixed mode.

              Kujtim Hyseni wrote:

              By the way, I don't use MySQL nor Oracle.

              They were provided as alternative solutions to your problem. I'm not going to provide any further pointers, as doing the dishes seems like a more important task suddenly.

              Bastard Programmer from Hell :suss:

              J 1 Reply Last reply
              0
              • L Lost User

                Kujtim Hyseni wrote:

                You didn't provided solution, that is just an article of capabilities.

                I don't have to provide a solution. I'm not at work, this 'advice' is being given in my own spare time. I could be doing something productive, like the dishes, but I had chosen to answer this question. Might benefit someone, and I'm sure the dishes do not mind waiting :)

                Kujtim Hyseni wrote:

                I need short and precise guide.

                You already have - it's called the documentation[^]. Right on the first lines, it states short and precise;

                There are two possible modes: Windows Authentication mode and mixed mode.

                Kujtim Hyseni wrote:

                By the way, I don't use MySQL nor Oracle.

                They were provided as alternative solutions to your problem. I'm not going to provide any further pointers, as doing the dishes seems like a more important task suddenly.

                Bastard Programmer from Hell :suss:

                J Online
                J Online
                Jorgen Andersson
                wrote on last edited by
                #7

                Doing dishes is definitely underrated. :-D :thumbsup:

                Light moves faster than sound. That is why some people appear bright, until you hear them speak. List of common misconceptions

                1 Reply Last reply
                0
                • K Kujtim Hyseni

                  Hi, I want to secure a database in SQL Server 2008. Here is the situation description: I am using both 'windows' and 'sa' authentication. When I create a database (logged as 'windows' authenticated) I can see and change it (create tables, stored procedures) from logged as 'sa' authentication or vice versa. So, there is no difference whether I create it logged as 'windows' or 'sa'. But, what I need is to secure a particular database i.e. even if I am logged as 'windows' I want the particular database to be accessed only by providing a username and password. Do you have any idea how to resolve this?

                  J Offline
                  J Offline
                  jschell
                  wrote on last edited by
                  #8

                  Why don't you just limit access? The database server should be on a secured box anyways and logins to that box should be limited to only a few people in the organization. All other access to the database are via login credentials.

                  1 Reply Last reply
                  0
                  Reply
                  • Reply as topic
                  Log in to reply
                  • Oldest to Newest
                  • Newest to Oldest
                  • Most Votes


                  • Login

                  • Don't have an account? Register

                  • Login or register to search.
                  • First post
                    Last post
                  0
                  • Categories
                  • Recent
                  • Tags
                  • Popular
                  • World
                  • Users
                  • Groups