Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Development (2000)
 Creating Havoc

Author  Topic 

elwoos
Master Smack Fu Yak Hacker

2052 Posts

Posted - 2005-12-05 : 08:24:48
We are a small outfit, essentially me and a junior developer. I'm going on holiday for about three weeks soon. The developer is claiming that during this period he will (desperately) need to create views and sprocs on our production system (event though this is work he's known about for months and he's known I've been going away for months!.

With my DBA hat on I am very reluctant to do this, with my operational management hat on I think he should be allowed to do it under some sort of controlled conditions. What do others think?

In a similar vein he is telling me that he can't create temp tables in sprocs. Do I need to specifically grant create table permissions on TEMPDB to him?

thanks

steve

-----------

Facts are meaningless. You could use facts to prove anything that's even remotely true!

druer
Constraint Violating Yak Guru

314 Posts

Posted - 2005-12-05 : 09:17:41
1. As a test I created a dummy user, and granted them select permissions to a database, and then logged in as that user. Without granting any special permissions to them they were able to create #temp tables with no problem. Which makes sense since TempDb has to be used for complex queries anyway.

2. I would ask to see the code that the junior is using to see if what they are doing is right or not. Alternatively you could just login as though you are him and see if you can create a temp table or not. If you can then you definitely don't need to be granting this guy permission to do anything in the system until you return and can train him, or he proves he's learned something.

3. Any junior needs to be managed with milestones. So in the future don't allow them to work for months without checking on their progress. You need to help them prioritize their work, and institute milestones where you can both see if he's on track or not.
Go to Top of Page

Kristen
Test

22859 Posts

Posted - 2005-12-05 : 14:55:05
I could mention the whole Public Flogging thread again ... if that would help?

Kristen
Go to Top of Page

druer
Constraint Violating Yak Guru

314 Posts

Posted - 2005-12-05 : 15:48:11
We don't permit public flogging here in the USA, but I would have no problem supporting that as an option, and have traveled to Singapore where I've seen that the net effect of that as an option are very, very good.
Go to Top of Page

Kristen
Test

22859 Posts

Posted - 2005-12-05 : 17:45:49
Druer Bondage Administrator, eh?!
Go to Top of Page

derrickleggett
Pointy Haired Yak DBA

4184 Posts

Posted - 2005-12-05 : 23:40:12
Steve, tell your developer that he's an IDIOT!!! If he can't even figure out the whole temp table issue, then he's not really even worthy to breathe around the database or anything that connects to it. You can give him this permission if you want while on vacation. You might want to post your resume though on monster and hit the Submit button.

Actually, you might just want to resign and go into consulting. They will need you and you can demand premium rates since you know the systems.

MeanOldDBA
derrickleggett@hotmail.com

When life gives you a lemon, fire the DBA.
Go to Top of Page

elwoos
Master Smack Fu Yak Hacker

2052 Posts

Posted - 2005-12-06 : 03:23:52
Derrick - I LIKE your suggestion

quote:
They will need you and you can demand premium rates since you know the systems


Even better than that - the company who supply the system have been bought out and the new owners know nothing about it either. I could perhaps contract to them too!


steve

-----------

Facts are meaningless. You could use facts to prove anything that's even remotely true!
Go to Top of Page

Kristen
Test

22859 Posts

Posted - 2005-12-06 : 03:35:14
Or come and put your feet up in Suffolk ...
Go to Top of Page

elwoos
Master Smack Fu Yak Hacker

2052 Posts

Posted - 2005-12-06 : 04:16:23
LOL, one day I'll appear on your doorstep - that'll scare you


steve

-----------

Facts are meaningless. You could use facts to prove anything that's even remotely true!
Go to Top of Page

AndrewMurphy
Master Smack Fu Yak Hacker

2916 Posts

Posted - 2005-12-06 : 04:19:58
You could always give him rights to create views/sprocs in a non-production database, with rights to look sideways (select only I presume) into the production database.

That way he can create views,etc to read data, and yet not add objects into production.
Go to Top of Page

elwoos
Master Smack Fu Yak Hacker

2052 Posts

Posted - 2005-12-07 : 03:19:21
quote:
You could always give him rights to create views/sprocs in a non-production database


He has these on a development/testing server

quote:
with rights to look sideways (select only I presume)


I'm not sure what you mean here. Do you mean like a linked server?

thanks

steve

-----------

Facts are meaningless. You could use facts to prove anything that's even remotely true!
Go to Top of Page

Kristen
Test

22859 Posts

Posted - 2005-12-07 : 04:55:15
"one day I'll appear on your doorstep - that'll scare you"

I've seen your photo - you're not wrong!!

Kristen
Go to Top of Page

Michael Valentine Jones
Yak DBA Kernel (pronounced Colonel)

7020 Posts

Posted - 2005-12-07 : 08:08:28
Just give the guy full sysadmin access to the production server and tell him to do whatever he needs.

No need to worry; what could go wrong?




CODO ERGO SUM
Go to Top of Page

Kristen
Test

22859 Posts

Posted - 2005-12-07 : 09:22:57
Exactly. How can "not having a job to come back to" be any different to "not wanting to come back to your job" ?

Kristen
Go to Top of Page

AndrewMurphy
Master Smack Fu Yak Hacker

2916 Posts

Posted - 2005-12-07 : 11:59:43
"Do you mean like a linked server?"...yup with SELECT only on the production machine.
Go to Top of Page

elwoos
Master Smack Fu Yak Hacker

2052 Posts

Posted - 2005-12-08 : 03:36:05
quote:
Just give the guy full sysadmin access to the production server and tell him to do whatever he needs.

No need to worry; what could go wrong?


quote:
How can "not having a job to come back to" be any different to "not wanting to come back to your job" ?


YEAH you guys are right! I could jump ship in the Carribean or the US, then everyone would be happy

steve

-----------

Facts are meaningless. You could use facts to prove anything that's even remotely true!
Go to Top of Page
   

- Advertisement -