3
kudos
spam Kudos Remove

For shared SQL Server providers : hiding your list of databases from customers

published 924 days, 2 hours, 50 minutes ago posted by sasa 926 days, 9 hours, 22 minutes ago
Tuesday, July 28, 2009 12:05:09 PM GMT Sunday, July 26, 2009 5:33:37 AM GMT

In a shared SQL Server hosting environment, there are several problems that can arise when you let your customers use Management Studio to connect and administer their databases.  In the typical case, you give them a single SQL Authentication username and password, and they are supposed to be able to connect only to their database.  By default, however, Object Explorer and Object Explorer Details will gladly present the entire list of databases on the server.  In this case, not only are you exposing all ...

category: Security | clicked: 8 | | source: sqlblog.com | show counter code
tags: Database List, Management Studio, Security, Shared Hosting, SSMS

No comments yet, be the first one to post comment.

To post your comment please login or signup