Hide Database Objects

[faccorp]

I have an SQL 2005 database with a front end written in C++.
I am using all stored procedures and views to access the tables and I am granting execute privledges and select privledges on the views. I also need to allow users to create and alter views.

I don't want the user to have the ability to see the code in the stored procedures. Or have the ability to modify the code. If they have SQL Management Studio then all of the code in the stored procedure is easily accessed.

How do I hide this code? Or how do I hide the Stored Procedure names, or both.

 

[gmmastros]

You could encrypt your stored procedures. This will keep prying eyes out of the code.

Create Procedure blah1 [!]with encryption[/!]
As
etc....

-George

Strong and bitter words indicate a weak cause. - Fortune cookie wisdom

 

[SQLDenis]

you could encrypt the store procs

create procedure bla WITH encryption
as
select getdate()
go

run sp_helptext bla
result:The object comments have been encrypted.

also when running this
select * from information_schema.routines
where specific_name = 'bla'
the definition will be NULL

However this is easily crackable




Denis The SQL Menace
--------------------
SQL Server Code,Tips and Tricks, Performance Tuning
Google Interview Questions

 

[SQLDenis]

One thing I forgot to mention MAKE SURE YOU HAVE THE CODE UNENCRYPTED somewhere. But since we all use source control this is not a problem, right?

Denis The SQL Menace
--------------------
SQL Server Code,Tips and Tricks, Performance Tuning
Google Interview Questions

 

[faccorp]

Thanks All.

Dennis, when you say easily crackable, do you mean someone can figure out how to un-encrypt?

 

[SQLDenis]

yep....

http://www.sql-shield.com/decrypt-stored-procedure.html

Denis The SQL Menace
--------------------
SQL Server Code,Tips and Tricks, Performance Tuning
Google Interview Questions

 

[faccorp]

Well what the flippin crap is it good for then!?

Are there other alternatives?

I put a lot of code in my sp's to cut down on network traffic and make the server do all the tough work. Isn't that the whole intent. And yet there's no way to hide it and keep it safe??

Any other design ideas out there?