Is there a way to prevent users for running profile/trace on the server?

SQLServerCentral is supported by Red Gate Software Ltd.

Popular Topics

Home

Members

Calendar

Who's On

Home » SQL Server 2008 » SQL Server 2008 Administration » Is there a way to prevent users for running...

Is there a way to prevent users for running profile/trace on the server?

Rate Topic

Display Mode

Topic Options

Author

Message

MyDoggieJessie

Posted Wednesday, February 20, 2013 2:43 PM

SSCrazy

Group: General Forum Members
Last Login: Yesterday @ 4:32 PM
Points: 2,063, Visits: 3,787

A few of our SQL Report writers have figured out how to execute SQL profiler to trace queries that they are working on. For my own reasons, I'd like to disable this - possible?

______________________________________________________________________________
"Never argue with an idiot; They'll drag you down to their level and beat you with experience" Wink

Post #1422312

Lynn Pettis

Posted Wednesday, February 20, 2013 2:51 PM

SSC-Insane

Group: General Forum Members
Last Login: Yesterday @ 9:17 PM
Points: 21,832, Visits: 27,855

Does this help?

http://msdn.microsoft.com/en-us/library/ms187611.aspx

Cool

Lynn Pettis

For better assistance in answering your questions, click here
For tips to get better help with Performance Problems, click here
For Running Totals and its variations, click here or when working with partitioned tables
For more about Tally Tables, click here
For more about Cross Tabs and Pivots, click here and here
Managing Transaction Logs

SQL Musings from the Desert Fountain Valley SQL (My Mirror Blog)

Post #1422319

MyDoggieJessie

Posted Friday, February 22, 2013 2:01 PM

SSCrazy

Group: General Forum Members
Last Login: Yesterday @ 4:32 PM
Points: 2,063, Visits: 3,787

Thanks Lynn, got what I needed from there (not sure why my first couple Google searches didn't find that) - appreciate your help!

Users who have the SHOWPLAN, the ALTER TRACE, or the VIEW SERVER STATE permission can view queries that are captured in Showplan output. These queries may contain sensitive information such as passwords. Therefore, we recommend that you only grant these permissions to users who are authorized to view sensitive information, such as members of the db_owner fixed database role, or members of the sysadmin fixed server role. Additionally, we recommend that you only save Showplan files or trace files that contain Showplan-related events to a location that uses the NTFS file system, and that you restrict access to users who are authorized to view sensitive information.

______________________________________________________________________________
"Never argue with an idiot; They'll drag you down to their level and beat you with experience" Wink

Post #1423257

GilaMonster

Posted Saturday, February 23, 2013 3:31 AM

SSC-Dedicated

Group: General Forum Members
Last Login: Today @ 6:22 AM
Points: 38,077, Visits: 30,372

To run profiler or create traces requires either sysadmin or ALTER TRACE permission on the server. If they have neither (and devs shouldn't have either on a prod server), then they cannot create traces.

Gail Shaw
Microsoft Certified Master: SQL Server 2008, MVP
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Post #1423338

- Win

Posted Saturday, February 23, 2013 10:00 AM

SSC Journeyman

Group: General Forum Members
Last Login: Monday, June 10, 2013 11:35 PM
Points: 86, Visits: 321

Perfect.

Thanks

Cheers,
- Win
"Dont Judge a Book by its Cover"

Post #1423355

« Prev Topic | Next Topic »

Permissions