We are running SQL Server 2000 and are having a problem with database data
being changed. We have a trigger which logs when changes are made and what
the old and new data is. I really need to know if or when someone is
disabling that trigger and changing data. It is possible that the trigger i
s
being disabled and then the data is being changed and I would like that even
logged and then an operator notified by email.
Any ideas?
Thanks!
ToddTodd,
Can you lock down the database a bit more? ALTER TRIGGER requires ddl_admin
or db_owner privileges. Don't give users this level of access and they won't
be able to disable the trigger, just give them the minimum rights to do what
they need to do.
SQL Server 2005 has DDL triggers, but there's nothing in SQL Server 2000
that will allow auditing of this. I'm not actually sure if SQL Server 2005
can do it either.
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602m.html
"MCSA_Todd" wrote:
> We are running SQL Server 2000 and are having a problem with database data
> being changed. We have a trigger which logs when changes are made and wha
t
> the old and new data is. I really need to know if or when someone is
> disabling that trigger and changing data. It is possible that the trigger
is
> being disabled and then the data is being changed and I would like that ev
en
> logged and then an operator notified by email.
> Any ideas?
> Thanks!
> Todd
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment