Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase ««12

Custom sp_who Expand / Collapse
Author
Message
Posted Wednesday, March 20, 2013 3:35 AM
SSCrazy

SSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazy

Group: General Forum Members
Last Login: Yesterday @ 9:38 AM
Points: 2,858, Visits: 5,132
datwungai (3/19/2013)
What exactly are you afraid of?


It's a former DBA that hates me because unlike him, I take my job seriously and won't give him sa permissions. He thinks because he "used to be a DBA at this company" that he's still entitled to the luxuries of sa rights without the responsibility of keeping the servers up and operational. Clear as mud?


I do like your work ethic! Just as mater of interest, why just simply not kill him? There are different options available: poison, knife, gun, box of dynamite at the end. Exterminate!

On a serious note, if your users just an ordinary database/application users, your are absolutely right. Granting this permission is too generous for them. Saying that, they would hardly ever ask for this one anyway. However if your user is a developer and that is development or test environment , then this permission is very important as it allows to monitor server activity and performance. I can hardly see how access to server stats
effects "keeping the servers up and operational".

But again, if he rally hates you, just offer him cup of coffee or tea, then just add a bit of polonium 210 and your enemy will be destroyed!


_____________________________________________
"The only true wisdom is in knowing you know nothing"
"O skol'ko nam otkrytiy chudnyh prevnosit microsofta duh!"
(So many miracle inventions provided by MS to us...)

How to post your question to get the best and quick help
Post #1433086
Posted Wednesday, March 20, 2013 4:34 AM
SSC Eights!

SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!

Group: General Forum Members
Last Login: Yesterday @ 7:59 AM
Points: 884, Visits: 2,417
Eugene, very well put.

I personally would arrange a meeting with you, the developer involved, his boss and your boss, and ask him to state why he needs these rights.

Then put a case where you can offer him something like the View Database state on Dev boxes only and maybe UAT, but production is off limits.

If he keeps pushing the case for SA rights simply state that he would also then need to take part responsibility for those boxes where hes grated those rights such as working weekends as part of being on call, doing the mundane daily work.

I would also give him a specific login for this rather than grant his standard network account with SA rights.

You might then see him back down quite quickly.

I'd also set up server level auditing so that if/when he screws up you have him by the soft and dangly things, and you have the perfect ammunition to get his rights revoked or have him removed, and you get the got the added bonus of the fact he did it all by himself.


_________________________________________________________________________
SSC Guide to Posting and Best Practices
Post #1433122
Posted Friday, March 22, 2013 10:54 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Wednesday, August 6, 2014 3:01 PM
Points: 14, Visits: 162
Thanks Vedran!
The certificate works like a charm!
dwg
Post #1434397
Posted Friday, March 22, 2013 10:56 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Wednesday, August 6, 2014 3:01 PM
Points: 14, Visits: 162
Thanks Stuart, my sentiments exactly. It's not the presidency, if you forfiet your title here, it's gone for good!
Post #1434401
Posted Friday, March 22, 2013 11:08 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Wednesday, August 6, 2014 3:01 PM
Points: 14, Visits: 162
Well said Jason.

I've had that meeting with our respective boss' - the underpinning is a political game that I can't win necessarily. However, I've played this game before and religiously document and audit where ever I can. With that, I've caught him off-guard and had him stammering in a room full of people who were ready to believe he needed the access, and he ultimately didn't get it. Small victory for me.

My whole MO is to keep it professional and act in good faith with regard to my duties as a DBA and it serves me well. I would have much rather partnered up with this guy because he's a very smart person and would've been a great asset, but his attitude killed it all when he felt he didn't need to treat me with respect because I didn't give him what he wants. And since he was a former DBA at this company, you'd think he'd be more understanding when it comes to the constraints IS has to work under (CM policies, etc.), but he chose the "Uncle Tom" route and burned just about every bridge he had in IS - now nobody wants to help this guy with anything.

What can you do when grown men behave like children? My philosiphy: "It's not my kid."
Post #1434414
Posted Friday, March 22, 2013 11:08 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Wednesday, August 6, 2014 3:01 PM
Points: 14, Visits: 162
Thanks Eugene!
Post #1434415
Posted Saturday, March 23, 2013 3:35 AM


Old Hand

Old HandOld HandOld HandOld HandOld HandOld HandOld HandOld Hand

Group: General Forum Members
Last Login: Monday, September 29, 2014 5:52 AM
Points: 369, Visits: 1,215
datwungai (3/22/2013)
Thanks Vedran!
The certificate works like a charm!
dwg


I'm glad to help. I'll put the script and explanations on my blog.


_____________________________________________________
Microsoft Certified Master: SQL Server 2008
XDetails Addin - for SQL Developers
blog.sqlxdetails.com - Transaction log myths
Post #1434584
Posted Saturday, March 23, 2013 8:12 PM


Old Hand

Old HandOld HandOld HandOld HandOld HandOld HandOld HandOld Hand

Group: General Forum Members
Last Login: Monday, September 29, 2014 5:52 AM
Points: 369, Visits: 1,215
Here it is, with a bit more explanations:
http://blog.sqlxdetails.com/procedure-with-execute-as-login/


_____________________________________________________
Microsoft Certified Master: SQL Server 2008
XDetails Addin - for SQL Developers
blog.sqlxdetails.com - Transaction log myths
Post #1434652
« Prev Topic | Next Topic »

Add to briefcase ««12

Permissions Expand / Collapse