Forums before death by AOL, social media and spammers... "We can't have nice things"
|    comp.databases.ms-sqlserver    |    Notorious Rube Goldberg contraption    |    19,505 messages    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
|    Message 18,967 of 19,505    |
|    Chad Jones to Erland Sommarskog    |
|    Re: 'Backup Database' permission    |
|    06 Dec 13 13:20:28    |
      From: noreply@noreply.com              On 12/6/2013 12:58 PM, Erland Sommarskog wrote:       > (rja.carnegie@gmail.com) writes:       >> Trying to be helpful, can you do something with a stored procedure       >> that only runs the backup in the way that you want to allow?       >> Which isn't the question that was asked.       >       > I started to say something along these lines, but since you only need       > a database permission to run BACKUP, I found that idea to be dead in       > the water. Of course, I don't know Chad's situation, but it is not       > uncommon that you have people on a server that are db_owner in a database       > and whom you don't trust to do things on server level.       >       >> Reading between the lines, the objective may be to prevent       >> unauthorised copying of data out of the system, or to make a       >> rule book that describes how it is prevented.       >       > If you want to export data out of the house, using the tape station       > which persumably physically quite well protected does not appear as       > a good vehicle.              Yes, I have no access to the tape backups or the tape backup       device so that is not an option. I do however have a full copy       of SQL Server 2008 R2 running on my dev machine. It is a       trivial matter for me to restore a .bak file from another       server on to my dev server. Which is why I was asking about       the 'Backup Database' permission. I have full R/W on the other       server but no 'Backup Database' permission. I'm sure the dba's       wouldn't give it to me if I asked for it because of the       aforementioned restrictions on the tape device. Even the dba's       don't have full access to the tape device. I was hoping that       if they could give me permission to backup to disk only that       would be the way to go. I don't even want to ask these guys to       run a script for me to backup to a disk location. Whatever       solution I find has to be something I can run myself. Thanks              --- SoupGate-Win32 v1.05        * Origin: you cannot sedate... all the things you hate (1:229/2)    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
(c) 1994, bbs@darkrealms.ca