dbTalk Databases Forums  

security of dts

microsoft.public.sqlserver.dts microsoft.public.sqlserver.dts


Discuss security of dts in the microsoft.public.sqlserver.dts forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Fred
 
Posts: n/a

Default security of dts - 05-09-2004 , 09:51 AM






What rights does one need to create a dts package, and what rights to see the packages and execute one
TIA
Fred

Reply With Quote
  #2  
Old   
Allan Mitchell
 
Posts: n/a

Default Re: security of dts - 05-09-2004 , 11:09 AM






By default a person only needs a lgon to the server. By default the user
"Guest" is a user in MSDB (dts SPs are here).
See packages - as above
Execute One - You can secure packages with Owner and User passwords.
Without at least the User password then a person cannot execute them. No
password? Thhen so long as you have the rights to do what is being done in
the package then you're OK


--
--

Allan Mitchell MCSE,MCDBA, (Microsoft SQL Server MVP)
www.SQLDTS.com - The site for all your DTS needs.
I support PASS - the definitive, global community
for SQL Server professionals - http://www.sqlpass.org


"Fred" <anonymous (AT) discussions (DOT) microsoft.com> wrote

Quote:
What rights does one need to create a dts package, and what rights to see
the packages and execute one?
TIA,
Fred



Reply With Quote
  #3  
Old   
Fred
 
Posts: n/a

Default Re: security of dts - 05-09-2004 , 11:31 AM



Thanks Allan
What would stop a user from creating a DTS package and then scheduling it to run. When it runs, it runs as the agent so it could access resources the user has no right to
TIA
Fred

Reply With Quote
  #4  
Old   
Allan Mitchell
 
Posts: n/a

Default Re: security of dts - 05-09-2004 , 12:12 PM



Remove Guest from MSDB for a start
Also sp_add_job defaults to Public also

You are nearly right about who runs a job but not quite. Have a look here

http://support.microsoft.com/?kbid=269074

--
--

Allan Mitchell MCSE,MCDBA, (Microsoft SQL Server MVP)
www.SQLDTS.com - The site for all your DTS needs.
I support PASS - the definitive, global community
for SQL Server professionals - http://www.sqlpass.org


"Fred" <anonymous (AT) discussions (DOT) microsoft.com> wrote

Quote:
Thanks Allan.
What would stop a user from creating a DTS package and then scheduling it
to run. When it runs, it runs as the agent so it could access resources the
user has no right to.
Quote:
TIA,
Fred



Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.