• Anirudh (3/15/2009)


    You think creating Application based Roles would help !!! - Cos - at the end of the day - the Application based roles can be overwritten using Administrative Permissions - can't they !!!

    You missed the first thing that steve said, so let me make it clear: You can not distribute a SQL Server database that locks out the Admins. There is no facility in SQL Server that can do anything remotely like this.

    What you can do is to secure your database against everyone else, except the Admins. This is what Steve was describing.

    The Microsoft recommended method of do this (securing the users, but not the admins) is to use Certificates. They are complicated and a little confusing (to me anyway), but they are the best that is available in SQL Server today.

    [font="Times New Roman"]-- RBarryYoung[/font], [font="Times New Roman"] (302)375-0451[/font] blog: MovingSQL.com, Twitter: @RBarryYoung[font="Arial Black"]
    Proactive Performance Solutions, Inc.
    [/font]
    [font="Verdana"] "Performance is our middle name."[/font]