Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 General SQL Server Forums
 New to SQL Server Programming
 encryption

Author  Topic 

aspnet25
Starting Member

5 Posts

Posted - 2012-02-01 : 23:36:41
SQL 2008 - Is there any way of 'encrypting' the database / table or even certain columns without having to make changes in the application code?

We want to prevent certain 'nosy' users from screwing around with the SQL 2008 database hosted locally at customer site and trying to change stuff.

I realize we can encrypt the data thru the application code by providing a encryption key / certificate. I would rather not change any code at this time. Wanted to know if there was a way to encrypt the whole database or certain tables which would prevent any user from making changes using the management studio or accesing the tables directly.

Maybe this is just a wishful thinking. Nevertheless I thought I will ask before going down the road of making changes at the application level.

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2012-02-01 : 23:55:45
How would the application decrypt the data without it knowing about the encryption?

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

aspnet25
Starting Member

5 Posts

Posted - 2012-02-02 : 00:03:54
Is there a way we can prevent the user from messing around with the data?
Go to Top of Page

SwePeso
Patron Saint of Lost Yaks

30421 Posts

Posted - 2012-02-02 : 03:01:00
Give them READONLY access.


N 56°04'39.26"
E 12°55'05.63"
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2012-02-02 : 13:22:03
aspnet25, are you referring to the people that will be the server administrators or DBAs of the server where your database will exist? Only way to prevent them from "seeing" your data is to encrypt it. They will always be able to access the tables.

Put strong verbiage in your contract with them that if anything is changed in the database directly that they are responsible for it.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page
   

- Advertisement -