Friday, March 9, 2012

encription in stored procedures

Hi All!
I'm a newby in SQL Server and I've got a question.
Is it really helps for securing to use encripted stored procedures and what
kind of problems it causes for me as a DBA and as a client apps developer?
Thanks for any advice!
DmitryThe answer depends on how you view the stored procedure. If you feel that
the procedure is so important that you do not want anyone to see it
(including yourself), then you can encrypt it. Encrypting a stored procedure
ensure that no one can see it. This includes, the user, the owner/creator
and the system administrator. Encrypting a stored procedure also ensures
that it does not get published in SQL Server Replication.
That said, from an application point of view and the DBA, the only advantage
that I see is that your procedure cannot be viewed by others. I'm not aware
of any performance issues because of encrypting a stored procedure and the
only problem that I see is, in case you want to view the source, you have to
do so from your source-control tool or from a local copy of the procedure
source.
--
HTH,
SriSamp
Please reply to the whole group only!
http://www32.brinkster.com/srisamp
"Dmitry Karneyev" <karneyev@.msn.com> wrote in message
news:uudfaIivDHA.2448@.TK2MSFTNGP12.phx.gbl...
> Hi All!
> I'm a newby in SQL Server and I've got a question.
> Is it really helps for securing to use encripted stored procedures and
what
> kind of problems it causes for me as a DBA and as a client apps developer?
> Thanks for any advice!
> Dmitry
>|||Hi,
Encryption of stored procedure is useful only when you don't want your clients or others to view the stored procedure script (basically using SP_HELPTEXT <SPName>). Disadvantage is that, even the creator will not be able to see the script, hence the creator should have an copy of the SP script to make modification at the later stage
Hope this help
Thank
GYK|||Just be aware that there are, unfortunately, tools "out there" to decrypt
encrypted procedures etc.
--
Tibor Karaszi, SQL Server MVP
Archive at:
http://groups.google.com/groups?oi=djq&as_ugroup=microsoft.public.sqlserver
"Dmitry Karneyev" <karneyev@.msn.com> wrote in message
news:uudfaIivDHA.2448@.TK2MSFTNGP12.phx.gbl...
> Hi All!
> I'm a newby in SQL Server and I've got a question.
> Is it really helps for securing to use encripted stored procedures and
what
> kind of problems it causes for me as a DBA and as a client apps developer?
> Thanks for any advice!
> Dmitry
>

No comments:

Post a Comment