home bbs files messages ]

Forums before death by AOL, social media and spammers... "We can't have nice things"

   comp.databases.ms-sqlserver      Notorious Rube Goldberg contraption      19,505 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 18,967 of 19,505   
   Chad Jones to Erland Sommarskog   
   Re: 'Backup Database' permission   
   06 Dec 13 13:20:28   
   
   From: noreply@noreply.com   
      
   On 12/6/2013 12:58 PM, Erland Sommarskog wrote:   
   >   (rja.carnegie@gmail.com) writes:   
   >> Trying to be helpful, can you do something with a stored procedure   
   >> that only runs the backup in the way that you want to allow?   
   >> Which isn't the question that was asked.   
   >   
   > I started to say something along these lines, but since you only need   
   > a database permission to run BACKUP, I found that idea to be dead in   
   > the water. Of course, I don't know Chad's situation, but it is not   
   > uncommon that you have people on a server that are db_owner in a database   
   > and whom you don't trust to do things on server level.   
   >   
   >> Reading between the lines, the objective may be to prevent   
   >> unauthorised copying of data out of the system, or to make a   
   >> rule book that describes how it is prevented.   
   >   
   > If you want to export data out of the house, using the tape station   
   > which persumably physically quite well protected does not appear as   
   > a good vehicle.   
      
   Yes, I have no access to the tape backups or the tape backup   
   device so that is not an option.  I do however have a full copy   
   of SQL Server 2008 R2 running on my dev machine.  It is a   
   trivial matter for me to restore a .bak file from another   
   server on to my dev server.  Which is why I was asking about   
   the 'Backup Database' permission.  I have full R/W on the other   
   server but no 'Backup Database' permission.  I'm sure the dba's   
   wouldn't give it to me if I asked for it because of the   
   aforementioned restrictions on the tape device.  Even the dba's   
   don't have full access to the tape device.  I was hoping that   
   if they could give me permission to backup to disk only that   
   would be the way to go.  I don't even want to ask these guys to   
   run a script for me to backup to a disk location.  Whatever   
   solution I find has to be something I can run myself.  Thanks   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca