Re: db permissions

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: jonjo (jonjo_at_discussions.microsoft.com)
Date: 12/03/04 

Date: Fri, 3 Dec 2004 01:59:02 -0800

Thanks Rick

I'll do that

"Rick Sawtell" wrote:

>
> "jonjo" <jonjo@discussions.microsoft.com> wrote in message
> news:3DA9DC0E-FEA9-48DD-A7B6-CBC6FAAA0D92@microsoft.com...
> > Hi
> >
> > I have a query in relation to db permissions. I created a local Windows
> > login and then created a SQL Server login using the same account. I gave
> > this
> > login access just to one database and assigned him to the
> > db_denydatawriter
> > role in that databse. This works fine as I just want them to have SELECT
> > access only on that db. The problem is that that login can still do
> > SELECT,
> > UPDATE, DELETE and INSERT on other db's within the server.
> >
> > I thought that if you didn't select Permit against a database in the
> > Database Access screen that the user would not have access to the db?
> >
> > What is the best way to prevent this user from accessing any db's apart
> > from
> > the one which I specified. I could obviously go through each db and
> > specify
> > db_denydatawriter but on servers with lots of db's that is not really
> > practical.
> >
> > Thanks in advance
>
> Check those other DB's for a guest account. If you don't have explicit
> access to a database and it has a guest account, then your login will use
> that guest account.
>
> Rick Sawtell
> MCT, MCSD, MCDBA
>
>
>

Relevant Pages

  • Re: Guest Account
    ... The guest accout is a way for people to access a database - NOT the sever. ... There is no login that is directly associated with guest... ... As for the guest account in Northwind/Pubs - yes, ...
    (microsoft.public.sqlserver.security)
  • Application Role and Guest user
    ... We have read that a database can have a guest account allowing a login ... without a user account in a specific database. ...
    (microsoft.public.sqlserver.security)
  • Re: db permissions
    ... > login and then created a SQL Server login using the same account. ... > I thought that if you didn't select Permit against a database in the ... Check those other DB's for a guest account. ...
    (microsoft.public.sqlserver.server)
  • Re: Master database can be browsed by any user. is this normal?
    ... Yes...the login would access the database through the guest account. ... Guest is a member of the public role so accessing through this account ...
    (microsoft.public.sqlserver.security)
  • Re: PDO: Switch database user without reopening connection
    ... At the bare minimum there will be a login user who only has ... modifications to the database as well (editors get update permission, ... As database connections are expensive to ... a certain visitor in the Session, and use that value to start the right ...
    (comp.lang.php)