SQL Server Security General Guidelines
Security breaches on any system, whether it's a million-hits-per-hour corporate server or a million-hits-per-millennium small office system, can mean the demise of the company—or just your job. Since SQL Server Express systems assume that the application takes on many security roles, it needs to be prepared to manage SQL Server logins, perform periodic maintenance such as data and log backups, move backup stores off-system (and hopefully off-site), and other maintenance tasks as appropriate for your database use. Your application also needs to take steps to monitor the health of the server log, and report problems it encounters.
Developers not familiar with SQL Server often overlook a more fundamental approach to security, such as SQL Server's ability to protect objects right down to the column. In most serious office systems, the DBA (if there is one) immediately restricts access to the base tables. After that, the DBA establishes specific user and role accounts that have focused access to the database, enabling appropriate permissions on specifically applicable views, stored procedures, and functions. This way, if the user credentials are hijacked, the only way the data can be accessed is through these very easily constrained mechanisms.
Summary
This article introduces you to the new and improved version of SQL Server 2005 known as the Express Edition. I touch on the differences in SQL Server Express that make it easier to use and easier to protect, and discuss several security issues ranging from protecting the data, protecting the server, and protecting the physical system. I hope this overview encourages you to migrate your existing JET applications to the more secure and more stable SQL Server 2005 Express Edition.
© Microsoft Corporation. All rights reserved.
source : http://msdn2.microsoft.com/en-us/sqlserver/aa336270.aspx
---------------------------------
Related :
UsingCrystalReports6
VerifyUserEmailAddressPHP-1
VerifyUserEmailAddressPHP-2
viewinformationvb2005
WatermarkImagesFlyPHP-1
WatermarkImagesFlyPHP-2
WhatAretheIssues
What-isMySQL
WhatSQLServerExpress
writefileinvb2005
WritingFileDialogBox
SimpleDatabasevb6
SQLServer2005fromVisualBasic6
SQLServer2005withPHP
SQLServerSecurityGuidelines
TransferringFiles
UsingCrystalReports6
