Post reply

Is there a way to prevent users for running profile/trace on the server?

  • February 20, 2013 at 2:43 pm

    #274305

    A few of our SQL Report writers have figured out how to execute SQL profiler to trace queries that they are working on. For my own reasons, I'd like to disable this - possible?

    ______________________________________________________________________________Never argue with an idiot; Theyll drag you down to their level and beat you with experience

  • February 20, 2013 at 2:51 pm

    #1589746

    Does this help?

    http://msdn.microsoft.com/en-us/library/ms187611.aspx

  • February 22, 2013 at 2:01 pm

    #1590524

    Thanks Lynn, got what I needed from there (not sure why my first couple Google searches didn't find that) - appreciate your help!

    Users who have the SHOWPLAN, the ALTER TRACE, or the VIEW SERVER STATE permission can view queries that are captured in Showplan output. These queries may contain sensitive information such as passwords. Therefore, we recommend that you only grant these permissions to users who are authorized to view sensitive information, such as members of the db_owner fixed database role, or members of the sysadmin fixed server role. Additionally, we recommend that you only save Showplan files or trace files that contain Showplan-related events to a location that uses the NTFS file system, and that you restrict access to users who are authorized to view sensitive information.

    ______________________________________________________________________________Never argue with an idiot; Theyll drag you down to their level and beat you with experience

  • February 23, 2013 at 3:32 am

    #1590593

    To run profiler or create traces requires either sysadmin or ALTER TRACE permission on the server. If they have neither (and devs shouldn't have either on a prod server), then they cannot create traces.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass

  • February 23, 2013 at 10:00 am

    #1590603

    Perfect.

    Thanks

    Cheers,
    - Win
    "Dont Judge a Book by its Cover"

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply