Francisco H Tapia
my.lists at verizon.net
Wed Mar 12 13:17:40 CST 2003
Susan, I think what Robert is saying is that users creating queries against *base* tables could pose a security risk of your database. I suggested getting copies of Views (not tables) so that you could control fields, and amount of data that such queries can look against. -Francisco http://rcm.netfirms.com On Wednesday, March 12, 2003 11:03 AM [GMT-8], Susan Zeller <szeller at cce.umn.edu> wrote: : They will be creating queries in access against COPIES of base tables : that I'll refresh regularly. They won't be working against the live : database at all, at least that's how I understand the suggestion on : the table. : : I don't want them to have to submit specs to me. The nature of the : work makes that not a very good option. : : --Susan : : -----Original Message----- : From: Djabarov, Robert [mailto:Robert.Djabarov at usaa.com] : Sent: Wednesday, March 12, 2003 12:58 PM : To: dba-sqlserver at databaseadvisors.com : Subject: RE: [dba-SQLServer]Not allowing users to create views -- onto : an alternative : : : Actually, allowing users to create queries in Access against the base : tables is as dangerous as allowing them to create views. Why can't : you set a rule that users must submit specs to you for desired views : and then you create them, using best practices of course? : : Robert Djabarov : Senior SQL Server DBA : USAA IT/DBMS : ? (210) 913-3148 - phone : ? (210) 753-3148 - pager : : -----Original Message----- : From: Susan Zeller [mailto:szeller at cce.umn.edu] : Sent: Wednesday, March 12, 2003 12:29 PM : To: dba-SQLServer at databaseadvisors.com : Subject: [dba-SQLServer]Not allowing users to create views -- : onto an alternative : : Okay, well the jury's verdict is clear on the issue of letting users : create views in my db -- I've lost my marbles. So, now that I've been : set back on the right track.... : : So, I think I'll follow what Charles outlined and create an mdb for : them to play around in. Can I create a DTS in SQL Server that will : refresh the data I want into the access file? Is that how you go : about keeping a fresh copy for your users? Can I execute the DTS : from within Access? The users may need to have refreshed data several : times a day. : : --Susan : : Susan B. Zeller