NEVER EVER under any circumstances use any administrator login for an application. This is regardless of which database or other supporting application being developed for. The fact that the legacy app uses it does not make it a proper practice. It is a huge security risk and makes the entire database server vulnerable for no good reason.
well the reason made me laught they said the application was writeen in spagety code, with the username and password all through the code :) turst me i know tw its writtein in a o-o language i dont quite understand it myself but anyways they said they didn't want to go back through it all if there was a way to edit the username (not login or password just name displayed when using USER) for the sa account :)
i told them no there wasn't and it wasn't overly secure to use sa guess we shall see
Tell your developers there's a way they can do a SEARCH their code! It's a great feature. Some of the more advanced software development tools (written since, say, 1984) even include a SEARCH/REPLACE function !