Uncategorized

Database Controls Revisited


SSWUG Free Expo Event: Real-World SharePoint Administration
Three More Days
February 11, 2011, 9 a.m. – 1 p.m. PST

Build your skills for deploying and supporting SharePoint by attending this virtual expo. Experts will teach you techniques for managing access control, implementation strategies and tips you can use immediately. With registration you also receive a free complimentary membership to SSWUG for one month. After the expo, the content will be available for further review and study.

Register today to reserve your place!

DBTechCon – Spring 2011
The SSWUG Spring 2011 virtual conference is quickly coming together. Without a doubt, this will be the largest virtual conference in the information technology industry. Access more than 70 sessions from well seasoned professionals with in-depth instruction on technologies such as SQL Server, SharePoint, .Net, Business Intelligence and much more. Register any time from now to April 19th. There are early registration discounts for those who register early. Go to the Registration page for more details and to get signed up right away.

$$SWYNK$$

Featured Article(s)
Fault Tolerance Options, Overview of Features and Techniques (Part 1 of 3)
For this session what we’re going to do is we’re going to talk about fault-tolerance. We’ll define it, explain what it means, and explain why you really should care about this, and then go into some of the Microsoft technologies that they have dubbed Always On from a marketing perspective and talk about some the Always On technologies. Then we’ll talk a little bit about the disk subsystem and RAID (Redundant Array of Inexpensive Disks) and how really the RAID environment is the beginning of anything with respect to fault-tolerance that you want to design and work.

Featured White Paper(s)
An Introduction to Workload Tuning
Workload Tuning is just what it sounds like: tuning the performance of all processes that comprise a database workload in one… (read more)

Featured Script
findColumns (setbased, ‘dirty’ version)
looks for tables with column names containing a given phrase… (read more)

Database Controls Revisited
I don’t want to beat a dead horse; but, I was surprised not to have much response on the topic of Database Controls.

There are lots of database controls you can have starting with Security and Permissions. Still, we need to provide certain users with adequate permissions allowing them to do a remarkable amount of damage to the integrity of a database. Personally, I have been responsible for limited bugs that could be fixed in only a few minutes. In one case, that few minutes cost the company thousands of dollars in lost revenue.

If we aren’t going to operate in a "Rambo" fashion, then what is left to us? I have some ideas that have worked well in my experience that I’d be willing to share. Before I do that, I’d like to hear from our readers techniques and processes that have Proven effective when change needs to be made in a production database, that is not part of a normal change control process.

I’m looking for ideas for scenarios like:

Immediate Fix High Profile Production Bug
New/modified Feature Releases
Protection Against Developer Hacking (secret code intended to do damage or commit fraud)

Drop me a note at btaylor@sswug.org with the techniques and processes you use to protect the integrity of your databases. I’d love to share your insights with our readers.

Cheers,

Ben