Re: DBO/Permissions questions

From: Kalen Delaney (replies_at_public_newsgroups.com)
Date: 08/05/04 

Date: Wed, 4 Aug 2004 22:47:55 -0700

In your other post, you said that when you logged in as tfs, you had the
user name of dbo, but here you say the user name is tfs. Which is it?

If, as I hypothesized in my reply to your other post, tfs is in the server
sysadmin role, then he will have full permission to do anything even without
permissions excplicitly granted or listed. Any login in the sysadmin role
has all the rights and privileges of 'sa'.

Please run sp_helpsrvrolemember sysadmin to see who is in the sysadmin role. 

-- 
HTH
----------------
Kalen Delaney
SQL Server MVP
www.SolidQualityLearning.com
"Thomas Scheiderich" <tfs@deltanet.com> wrote in message
news:10h3cj89pt4k465@corp.supernews.com...
> I am trying to understand this whole permissions thing.  So I have an
> example that is confusing me.
>
> I have a database - VDW.
> I have 3 users:
>         Name                   Login ID                   Database Access
>          dbo                        sa                            Permit
>          SqlExec                                                 Permit
>          tfs                          tfs
Permit
>
> tfs has a database role of public
> DBO is sa.
> I have a table CountGrp whose owner is DBO (I assume this means that I
> created this while logged on as sa)
> When I list only users with permissions on this object - it shows nothing
(I
> assume the dbo, however, has permissions)
>
> How come when I log on as tfs, I can do a select and update of CountGrp
> (which says no one has permissions)?
>
> Thanks,
>
> Tom.
>
>

Relevant Pages

  • Re: How to prevent DELETEs in a table
    ... What you say about dbo is true, but it is even MORE true about someone who ... is in the sysadmin role. ... No permissions are ever checked for someone in the ... the deny is not applied. ...
    (microsoft.public.sqlserver.server)
  • Re: DBO/Permissions questions
    ... "Kalen Delaney" wrote in message ... but here you say the user name is tfs. ... > sysadmin role, then he will have full permission to do anything even ... >> I am trying to understand this whole permissions thing. ...
    (microsoft.public.sqlserver.programming)
  • Problem is w/ .ADP..Re: SQL db Permissions for users not working
    ... You do not have SELECT permissions on the ... SysObjects system table in the database. ... figured out that qualifying the database owner (dbo in my ... >> I feel that the object owner is not dbo, ...
    (microsoft.public.sqlserver.security)
  • Re: public role question
    ... If 'select user' is returning DBO, it means you are connecting AS DBO, and ... testing the permissions the new user has. ... Are you saying that the permissions to create the stored procedure are ... Dan D. ...
    (microsoft.public.sqlserver.security)
  • Re: How to prevent DELETEs in a table
    ... It is the dbo database USER, not server-level groups, that determins ... It has implicit permissions that can not be denied. ... SQL Server just skips any permission validation for sysadmins. ...
    (microsoft.public.sqlserver.server)
Loading