Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
arturos
Starting Member
7 Posts |
 Posted - 2006-05-13 : 10:09:28
|
| How you can restrict to Databases Administrator to modifyrecords in a Production Database? |
|
|
jen
Master Smack Fu Yak Hacker
4110 Posts |
Posted - 2006-05-13 : 10:55:55
|
you cannot restrict the DBA but you can do an audit trail so you get to know what records were modified, even if you apply an explicit deny, the DBA will see the error and will just revoke the deny, so it is not only fruitless but pointless to do sobut if you start doubting your DBA then you are questioning his credibility  ...--------------------keeping it simple... |
 |
|
|
derrickleggett
Pointy Haired Yak DBA
4184 Posts |
Posted - 2006-05-14 : 14:29:18
|
Fire the DBA, lock down the AD account, and insure your firewall and security software is doing exactly what you intended.  MeanOldDBAderrickleggett@hotmail.comWhen life gives you a lemon, fire the DBA. |
|
|
|
mr_mist
Grunnio
1870 Posts |
Posted - 2006-05-15 : 04:12:52
|
| The question is ambiguous. If you mean how can you stop the Database Administrator from modifying data, then see above.If you mean "how can I restrict the production database so that only the database Administrator can modify data" then give all accounts except the DBA the "deny datawriter" role.-------Moo. :) |
|
|
|
|
|
|
Restrict to modify records to Database Adm.