views:

65

answers:

1

as far as i know oracle has the "DATA VAULT" feature.so has sql server?if it has,give me an information link about that feature please.

* Preventing highly privileged users (DBA) from accessing application data
* Enforcing separation of duty
* Providing controls over who, when, where and how applications, data and databases can be accessed.

http://www.oracle.com/technology/deploy/security/database-security/database-vault/index.html

+1  A: 

Sql server can encrypt data, and it has a very fine-grained ACL model.. What specific security and auditing features are you looking for ?

-- edit --

SQL server has a master superuser 'sa', however roles can be created with restricted administrative privileges.

From your link :

  • Providing controls over who, when, where and how applications, data and databases can be accessed.

I can't say anything about the 'when' in terms of how the ACL's are modelled [1]. But the when, where and what can be modelled.

[1] Does someone know if time can be represented in the ACL models ?

Hassan Syed
Nothing through SQL 2005 allows login enabling/disabling by time (unless you modify access rights via scheduled jobs, which sounds like a pretty poor idea). I haven't heard of SQL 2008 doing this, either.
Philip Kelley
Yeah, thought so, and besides I think that stuff should go into application logic if you ask me.
Hassan Syed