SQL: Stop connecting applications as dbo or sa
I can’t tell you how many sessions for developers that I have attended, where the demonstration shows an application connecting to a database as the database owner (dbo) or as a system administrator (like sa). Are we then surprised when developers do this in their own applications?
Please don’t do this.
If you’re running a utility application that’s only used by administrators, and is run within a secure part of the environment, that might be ok. But for normal user applications, it’s just not safe to do so, and it’s really poor practice.
2026-01-05
