Re: Newbie: I don't understand user permissions for table access

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Keith Kratochvil (sqlguy.back2u_at_comcast.net)
Date: 07/28/04


Date: Wed, 28 Jul 2004 09:22:20 -0500

wrong
table permissions are important. They are required in order to
access/update/delete data.

HOW are you connecting to SQL Server?
NT Authentication?
SQL Server Authentication?

If SQL Server auth, what account are you using? sa? If so, that is the
"GOD" account. You have full permissions to do anything and everything.

If you are using NT auth, what rights does your NT account have? Is it
assigned server or database roles that allow the activities that you are
performing?

Finally, what rights/permissions have been granted to the PUBLIC role?
Often (unfortunately) companies simply grant all rights to the public
role...and then evey account (SQL and NT) inherit the rights assigned to the
public role. For obvious reasons this is a bad security model.

SQL Server has a strong security model and it works well when it is setup by
someone who knows what they are doing. In the wrong hands....

-- 
Keith
"Larry Woods" <larry@NOSPAMlwoods.com> wrote in message
news:eM31J1KdEHA.3864@TK2MSFTNGP10.phx.gbl...
> I have a SQL Server database that has database userid/password protection.
> When I open the database through EM I can add/delete/modify any table, but
> when I look at the permissions for any of the tables there are NO options
> set for any user of the database!  I don't understand the purpose of the
> permissions, I guess, since they don't have to be set in order to get
access
> to the tables.
>
> TIA,
>
> Larry Woods
>
>


Relevant Pages

  • RE: Problems with WebParts
    ... to a database called aspnetdb. ... > The connection string specifies a local SQL Server Express instance using a ... > server account must have read and write access to the applications directory. ... > This is necessary because the web server account will automatically create ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: DTS Package fails when Scheduled
    ... Apparently I was unable to pass on the database password when runninig the ... Make sure SQL Server Agent account has the correct rights/permissions. ... scheduled job under this context, I still received the error, even though I ...
    (microsoft.public.sqlserver.dts)
  • Re: Execute Persmission denied on object sp_OACreate
    ... If so what access and permissions. ... The account is a windows account. ... One method to test permissions is to log in to your SQL Server box using the ... >>> SA account password and gaining access to the database. ...
    (microsoft.public.sqlserver.security)
  • Problems with WebParts
    ... The connection string specifies a local SQL Server Express instance using a ... database location within the applications App_Data directory. ... server account must have read and write access to the applications directory. ... logged-in user needs the dbcreator privilege in the appropriate SQL Server ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Specifying a logon account for SQL Server 2005 services
    ... As I mentioned using a Windows domain account with no permissions is the ... configured only for very specific server and memory configurations. ... account to use while installing SQL Server, will SQL Server give this account ...
    (microsoft.public.sqlserver.security)