Database security

hi thr,

May I know how to create a secure database? I heard some of my seniors said about something that outsider unable to open and view our database table unless the user is the admin itself...instead of setting password to our database, is there any other way to avoid our database to be viewed from other people?

p/s: Any databases but I prefer SQL Server 2000 for this question...thx!!Nobody can access database unless you grant them rights.
If you are sysadmin revoke all rights and privileges like security administrator or system administrator from all users and create, for example, read_only group (role) in each database. You can grant some rights to this group like select from some tables of views, execute from some reporting stored procedures. Any new user should be a member of this group. And you will not have to worry granting rights separately to each user.
If you have user_id and password that everyone knows. You just change a password and nobody will be able to login without your knowledge or permission.

To test my words:
1.create some login_id make it a member of read_only group.
2.login with this new UID and see what youll see or be able to do.

Hope it helps.
There is much more to it. But people write books on Server Security and it is not a place for it.. :)

Database otpion @ Client - Smart Client

Hello,

We are trying to develop a smart client application which is occasionaly connected. The issue here is we are unable to decide on the database which needs to be used in the client. We will not able to use MSSQL express or MSDE becuase of the size limitation. The size of the DB is actually a couple of gigs(SQL server backup). The user need not do any transaction which needs to be re recorded in server. The user will connect only to donwload data and get the application updates.

The other important factor the user should have high performance of the applciation

Please suggest

I'm not an expert on all of the SQL Express specifications, but according to this, the limit is actually 4GB, so maybe this would work for you:

Comparing SQL Server Express with MSDE

http://msdn2.microsoft.com/zh-cn/library/ms165672(SQL.90).aspx

Thanks,

Sararh

|||

Sorry. I must have told you...I will also have incremental update to the database..so everytime you update the database size is going to grow ...So it will easily cross 4 GB of data over a period of time ...