Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
homebrew
Posting Yak Master
114 Posts |
 Posted - 2007-09-24 : 11:55:30
|
| We're considering moving our payroll database to a server that is used by several other databases (and their applications) and many users. I have a Windows Global group that has Admin rights. Of course, that will only contain 1 or 2 authorized users. The Payroll databases will have read/write access given only to the payroll application.What type of loopholes might allow non-authorized users access to the Database ?? |
|
|
Kristen
Test
22859 Posts |
Posted - 2007-09-24 : 12:01:29
|
Anyone in Administrators Windows group, and anyone with SYSADMIN / SA permissions on SQL Server will be able to see the whole lot.Other than that, "ordinary users" will only be able to see that database if they are explicitly granted permissions to it.But you would still want to prove that  Kristen |
 |
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2007-09-24 : 23:50:02
|
| We put payroll db on its own server and that server is on separate network. |
|
|
|
|
|
|
Securing Payroll DB on a Server w/ other DBs