|
FWIW Foxhound uses a mixture of old-school and politically-correct privileges to set up three end-user administration user ids ( they should all be upgraded but something more interesting always gets in the way :) GRANT CONNECT TO STOPPER IDENTIFIED BY "SQL"; -- no other permissions, only used to connect via dbstop.exe GRANT CONNECT TO BACKER IDENTIFIED BY "SQL"; GRANT BACKUP TO BACKER; GRANT MANAGE ANY DBSPACE TO BACKER; -- to allow dbbackup -x delete and restart transaction log GRANT CONNECT TO VALIDATOR IDENTIFIED BY "SQL"; GRANT VALIDATE TO VALIDATOR; The passwords seem rather old-school, as well, rather than following the "politally-correct" v17 minimum length:)
(27 Jan '21, 03:06)
Volker Barth
Replies hidden
1
You're right, that's just inviting a dbvalid vector DOS attack! :)
(27 Jan '21, 07:37)
Breck Carter
|
|
With v16 and above, there's a separate BACKUP DATABASE system privilege, so assigning the privilege should do, methinks, such as GRANT BACKUP DATABASE TO ABackupOperator; |
