I can run any query on SQL Server without passing credentials, is that normal?

Asked

Viewed 371 times

0

I was looking to restart the SQL Server service, that’s when I discovered a way to manipulate the database without logging into the system. See:

  1. I opened Management Studio. Abri o SQL Server
  2. I canceled the authentication.

Cancelei autenticação.

3.Access the View > Registered Servers menu. Note that Object Explorer is disconnected. inserir a descrição da imagem aqui

  1. My instance of SQL Server running...

inserir a descrição da imagem aqui

  1. New Consultation... inserir a descrição da imagem aqui
  2. Dropping the bank... inserir a descrição da imagem aqui

Anyway, this is kind of weird, does anyone know how to fix it? After all if someone has access to my machine...

database sql-server security-guard

  • but Voce is using credentials, is using "Windows credels", because this local server is setup to use Windows Credentials. No Security > Login/Authentication from that server, say you only want by keyword and remove Windows Credentials.

  • @balexandre understand, it is actually a local server, but I usually use SA to log in, especially in Visual Studio... Anyway, in Login there are several users, in case I should delete which one of them?

1 answer

2


Being a local server that is using your local user credentials, the answer is yes, this is normal.

Note, however, that it is normal for a development environment used by a programmer or, at most, a development or testing team.

In a production environment, a database administrator must correctly set up the minimum permissions required for systems and users accessing the database.

Browser other questions tagged database sql-server security-guard

You are not signed in. Login or sign up in order to post.