Notă
Accesul la această pagină necesită autorizare. Puteți încerca să vă conectați sau să modificați directoarele.
Accesul la această pagină necesită autorizare. Puteți încerca să modificați directoarele.
Applies to:
SQL Server
Software developers often ask how to distribute their SQL Server data application to customers while preventing customers from analyzing and deconstructing their application. The key principle here is that protecting your intellectual property is a legal issue, and the protection rests in your license agreement. When SQL Server is installed on a computer that others administer, you inherently lose some aspects of control.
Nature of the problem
The owner or administrator of a computer can always access the instance of SQL Server that is installed on that computer. If you deploy your application to a customer's computer, since they're administrators, they can connect to the SQL Server as members of the sysadmin fixed server role. This includes the ability to grant permissions, manage backups (including restoring backups to other computers), decrypt and move data files, and more. For more information, see Connect to SQL Server When System Administrators Are Locked Out.
Stored procedures and data can be encrypted, but the data structure can't be hidden, and users who can attach a debugger to the server process can retrieve decrypted procedures and data from memory at runtime.
If the clients aren't administrators on the computers, you can prevent access by the clients. You can use Transparent Data Encryption to encrypt the data files, you can encrypt backups, and you can audit the actions of all users. But SQL Server administrators and admins of the SQL Server computer can reverse these actions.
Solution
There are various ways to configure client data access without installing SQL Server on your client's computer. The easiest is probably using Azure SQL Database so the clients aren't admins, perhaps in combination with Always Encrypted. For more information about getting started with SQL Database, see What is Azure SQL Database?.
You can also host a SQL Server on your own network, and allow clients to access data through your network, either directly or through a web application.