On Thursday, 5 December 2013 22:19:35 UTC, Erland Sommarskog  wrote:   
   > Chad Jones (noreply@noreply.com) writes:   
   > > Can any one tell me if it's possible to grant the 'Backup   
   > > Database' permission to a user, but only for a disk location,   
   > > not a tape device?  Thanks   
   >   
   > I don't think so. SQL Server writes to the backup device using its own   
   > identity; it does not impersonate the actual user, so you cannot control   
   > it with direct permissions on the device either.   
      
   Trying to be helpful, can you do something with a stored procedure   
   that only runs the backup in the way that you want to allow?   
   Which isn't the question that was asked.   
      
   Reading between the lines, the objective may be to prevent   
   unauthorised copying of data out of the system, or to make a   
   rule book that describes how it is prevented.   
      
   Other ideas such as using the tape device on the standby server   
   and not giving a user the "backup database" permission on that   
   server, come to mind.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)