Re: securityadmin roles

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: SQL Apprentice (mssqlworld_at_yahoo.com)
Date: 09/15/04 

Date: Wed, 15 Sep 2004 14:50:54 -0700

Hi Tom,

So what is the purpose of this securityadmin role???
Can't a DBCreator create new logins to the database it creates?
I am working on a new applications that needs DBcreator and SecurityAdmin
roles.
However, I am afraid it could it be a security loop hole for others to
creates and change passwords.
Is it 100% safe to leave this application user with these 2 roles, dbcreator
and securityadmin?

Thanks again Tom,

"Tom Moreau" <tom@dont.spam.me.cips.ca> wrote in message
news:uDZvGV2mEHA.1644@tk2msftngp13.phx.gbl...
> Nope.
>
> --
> Tom
>
> ---------------------------------------------------------------
> Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
> SQL Server MVP
> Columnist, SQL Server Professional
> Toronto, ON Canada
> www.pinnaclepublishing.com/sql
>
>
> "SQL Apprentice" <mssqlworld@yahoo.com> wrote in message
> news:eZcTGT2mEHA.896@TK2MSFTNGP12.phx.gbl...
> Can securityadmin roles change the sa user password and grant user to as
an
> sa role using Query Analyzer?
>
> Thanks in advance
>
>

Relevant Pages

  • Re: securityadmin roles
    ... You should check out fixed server and fixed database roles in the BOL. ... SQL Server MVP ... So what is the purpose of this securityadmin role??? ... Can't a DBCreator create new logins to the database it creates? ...
    (microsoft.public.sqlserver.programming)
  • Re: SQL Login
    ... some other sysadmin / securityadmin personnel for that. ... >> User X is a machine administartor in the SQL Server box. ...
    (microsoft.public.sqlserver.security)
  • Re: Viewing the Error Log through Enterprise Manager.
    ... SecurityAdmin - and ProcessAdmin. ... >Jasper Smith (SQL Server MVP) ... >> Server Logs through Enterprise Manager. ...
    (microsoft.public.sqlserver.security)
  • Re: sp_AddLogin
    ... > not involve the obvious sysadmin and securityadmin. ... and only on a couple of databases ... >>Columnist, SQL Server Professional ... >>What permission doesw a login need to perform ...
    (microsoft.public.sqlserver.security)
  • Re: sp_AddLogin
    ... not involve the obvious sysadmin and securityadmin. ... and only on a couple of databases ... >Columnist, SQL Server Professional ...
    (microsoft.public.sqlserver.security)