To all Guru's out there;

We are working with a consultant who is implemented this application and the
database is on our SQL Server database. He had granted dbo to several
accounts, including his, in addition to the account that owned the schema.
My argument is that this is a security problem since anyone who has the dbo
priv can manipulate any object of the schema, even delete them. I don't see
any advantage on this configuration? I need to know what do you guys think?

Janet Mangual
Database Administrator, MIS Division
Miami-Dade Water & Sewer Department


MS Sql Server LazyDBA home page