That's a major reason we don't allow scripts to be run against production unless...

We have to get an exception approved to use a SQL login, and those are only granted for vendor proivded applications. In house developed apps must use windows authentication. I...

I'm somewhat skeptical that birth date, zip code, and gender are enough to uniquely identify 87% of Americans. That may be true in more rural areas, but not in cities,...

For ID's that are powerful, like admin's, and are authenticated by Active Directory, we use a smart card, or require that the ID be checked out from an application that...

Andrew (8/26/2009)

---

Hopefully DBAs would be much more careful, but as I read this I was reminded of all the jobs I've had where a supervisor had to enter verification (via...

codemaster_7 (8/24/2009)

---

I work in big shops--banks, insurance companies and government. Currently, there is so much red tape in order to accomplish the smallest task, I would be leery of...

Some of this depends on the regulatory requirements...

The question is whether certain IDs can elimiante records related to...

That depends on the group policies...

There's no real easy way to find the data that's too long. I usually look at each cloumn from the source and make sure that the receiver columns are appropriately...

We use robocopy for many filecopy operations. It works well across the WAN, and is pretty robust. I understand it's easy to automate as well. It's available from Microsoft.

I think much of the internal hacking comes from inadequately defining the controls environment for our applications, leaving security concerns for the last minute. Assessing the risks of an application...

I'll second that belief that non-database programmers who try to use SQL overuse cursors. I support a vendor provided app, and have spent copious amounts of time beating on the...

I've seen several apps that were developed in...

I would also question how you prevent users from using Access and ODBC to make changes to tables directly. This is one reason we do all of our updates via...