Re: loss of permissions

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



bic,

This would probably be better posted in microsoft.public.sqlserver.server if
you have future questions in this vein.

When you restore your database, you lose the permissions that had been
granted to your stored procedures. The only way to 'globally' assign
permissions at the server level is to use server level permissions, all of
which would be pretty heavy for you need. (Making everyone system
administrator is not a good idea.)

Your problem is that your database's permissions (users, roles, and grants)
are not the same as the database that you are restoring from. (If I
understand correctly, I would probably call this a database 'refresh'.) A
couple of things will help:
1. Script out roles, users, their role memberships, and any permissions
(GRANT, REVOKE, DENY) before restoring over your current database.
2. After the restore drop the users (if appropriate) from the restored
database.
3. Run your script to reapply all the permissions..

It is a good practice to always GRANT and REVOKE rights to roles, not to
particular users. This contains the scope of grants and makes management a
little easier. (It also makes it easier to give Fred the same rights Judy
has.)

RLF


"bic" <bic@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:764C3CBF-BB33-4850-82EC-85081E667071@xxxxxxxxxxxxxxxx
Hi,

How do I prevent permission wiped from my SPs when it comes to restoring
dbs? Is there a way to assign permission globally? Thanks.
--
bic


.



Relevant Pages

  • Re: object level permissions being lost when migrating
    ... While I understand that the permissions are at the ... Database level, that is why I am not understanding why I have an issue. ... Moving Users ... Errors After Restoring Dump ...
    (microsoft.public.sqlserver.security)
  • Re: Security Script
    ... Restoring or attaching a database does not alter permissions in any way. ... a mismatch between logins and users on the new server and be symptomatic ...
    (microsoft.public.sqlserver.security)
  • Re: Disaster Recovery Scenario Help
    ... Right...I understand the concept of the SID... ... assign them permissions, then what would be affected by the SID change other ... >>> promote the DR servers into DCs? ... In that case restoring DCs ...
    (microsoft.public.windows.server.active_directory)
  • Re: Preventing users from opening onther users mailbox in outlook
    ... Simply restoring the information store itself will not modify the ... The permissions on those objects are stored in Active ... Go into a user account properties, go to the Exchange Advanced tab (may need ... With Full Mailbox Access? ...
    (microsoft.public.exchange.admin)
  • Re: Password for CurrentUser()
    ... restored mdw. ... protect from restoring old backups -unless one did some sort of ... But my point was that instead of applying permissions to groups, ... Even if a user restores an old mdw and uses their old ...
    (microsoft.public.access.security)