SEO

#1 (**permalink**) 03-01-2008, 11:53 AM

Hello,
I wrote some complicated functions (and stored procedures) in database
at my work. System administrator (and every db user) can view codes
(in Enterprise Manager for eg.). My employer needs periodic modifying
of code and so I'm required to do it. But I can loose my job

because users are able to modify code (althout they ware too lazy to
create it by themselves).

Is this possible to protect functions from view it?

[please, don't mind my english]

#2 (**permalink**) 03-01-2008, 11:53 AM

Pulpet (xyzt@op.pl) writes:
> I wrote some complicated functions (and stored procedures) in database
> at my work. System administrator (and every db user) can view codes
> (in Enterprise Manager for eg.). My employer needs periodic modifying
> of code and so I'm required to do it. But I can loose my job

> because users are able to modify code (althout they ware too lazy to
> create it by themselves).
>
> Is this possible to protect functions from view it?

I don't really know why you would prevent people from viewing your code,
least of all if they are in the same company.

But you should of course have all your code under version control, and
use the database as the storage for your code.

--
Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se

Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/pro...ads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinf...ons/books.mspx

#3 (**permalink**) 03-01-2008, 11:53 AM

Dnia Fri, 22 Dec 2006 11:24:54 +0000 (UTC) grupowicz Erland Sommarskog
<esquel@sommarskog.se> wrote:
>I don't really know why you would prevent people from viewing your code,
>least of all if they are in the same company.
It's a too long story. I have some reasons to do this.
>But you should of course have all your code under version control, and
>use the database as the storage for your code.

Thanks for answer.

PS.I don't know about version control (I'm not a developer).
At other newsgroup user wloochacz send me answer:
FUNCTION < function_option > ::= { ENCRYPTION | SCHEMABINDING }
and I used clause: with encryption
which is enough for me

Thanks

#4 (**permalink**) 03-01-2008, 11:53 AM

"Erland Sommarskog" <esquel@sommarskog.se> wrote in message
news:Xns98A17E44A56E4Yazorman@127.0.0.1...
> Pulpet (xyzt@op.pl) writes:
>> I wrote some complicated functions (and stored procedures) in database
>> at my work. System administrator (and every db user) can view codes
>> (in Enterprise Manager for eg.). My employer needs periodic modifying
>> of code and so I'm required to do it. But I can loose my job

>> because users are able to modify code (althout they ware too lazy to
>> create it by themselves).
>>
>> Is this possible to protect functions from view it?
>
> I don't really know why you would prevent people from viewing your code,
> least of all if they are in the same company.
>
> But you should of course have all your code under version control, and
> use the database as the storage for your code.

Also, it sounds like the viewing isn't the problem, it's the users able to
modify the code.

Simple answer, make sure they don't have rights to make such changes.

Generally as a first pass, I try to lock users down to db_datareader and if
necessary db_datawriter.

That may solve your problem.

>
>
> --
> Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se
>
> Books Online for SQL Server 2005 at
> http://www.microsoft.com/technet/pro...ads/books.mspx
> Books Online for SQL Server 2000 at
> http://www.microsoft.com/sql/prodinf...ons/books.mspx

#5 (**permalink**) 03-01-2008, 11:54 AM

Pulpet (xyzt@op.pl) writes:
> PS.I don't know about version control (I'm not a developer).
> At other newsgroup user wloochacz send me answer:
> FUNCTION < function_option > ::= { ENCRYPTION | SCHEMABINDING }
> and I used clause: with encryption
> which is enough for me

Then I hope you really have your code stored somewhere else, because else
you will not be able to retrieve it.

Well, there is code to reverse the so-called encryption; it's really only
obfustication.

--
Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se

Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/pro...ads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinf...ons/books.mspx

#6 (**permalink**) 03-01-2008, 11:54 AM

>> My employer needs periodic modifying of code and so I'm required to do it. But I can lose my job

because users are able to modify code. <<

Can you make the procedures table-driven? Then let the users change
the tables and not the procedure code itself. You will need a
front-end and procedure to le them make these changes.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

SEO

protecting functions from view it