如何控制用户访问数据库

使用SQL Server Log On trigger:

 

CREATE DATABASE AuditDb

 GO

 USE AuditDb

 GO

 /* Create AuditTable */

 CREATE TABLE ServerLogonHistory

 (SystemUser
VARCHAR(512),

 DBUser VARCHAR(512),

 SPID INT,

 LogonTime DATETIME)

 GO

 /* Create LogonTrigger */

 CREATE TRIGGER Tr_ServerLogon

 ON ALL
SERVER FOR LOGON

 AS

 BEGIN

 INSERT INTO AuditDb.dbo.ServerLogonHistory

 SELECT SYSTEM_USER,USER,@@SPID,GETDATE()

 END

 GO

 

用户登录后查看监控表：

 



 

因为我们可以监控到用户登录SQL Server的情况，所以我们就可以限制用户的访问，参考下面的文章：How to prevent users from accessing SQL Server from any application or any login expect your main application & its login：http://thesqldude.com/2012/04/07/how-to-prevent-users-from-accessing-sql-server-from-any-application-or-any-login-expect-your-main-application-its-login/