VSS Admin user issue..



VSS version: 6.0 a
Recently, I noticed that some users are logging into one of the VSS
databases with "Admin" user login. Admin user for the vss database has a
password and only VSS Admin is aware of the password.

This is the scenario:

Users login to a common PC (OS: windows XP pro or windows 2000 Pro), locally
as Local Administrator (NT user name "Admin"). They launch vss client on
that pc, connect to vss database and since “Use network name for automatic
user log in” is enabled users are automatically logged including the Admin
user that has a password. Password prompt for Admin user is completely
being bypassed. This could potentially cause many problems if users
intentionally or unintentionally do anything (such as purges..) in the
database. Also there would be no traceability for code changes (on who
has made the changes).

Is this a known bug in visual source safe? If so, is there a work around
for this problem?

--
RR
.



Relevant Pages

  • Re: How do I get (or set) the password for VSS 2005 users?
    ... VSS users/passwords are not a mean to enforce security on the VSS databases. ... A malicious user with access to the database share doesn't need the admin ...
    (microsoft.public.vstudio.sourcesafe)
  • Re: The database (database name) does not exist. Please select another
    ... Is the local machine's srcsafe.ini file correct? ... > (database name) does not exist. ... > different machine using the VSS 6 admin gui. ... Does anyone know why the VSS ...
    (microsoft.public.vstudio.sourcesafe)
  • Re: Admin Password
    ... > *How can I reset my lost password for the Admin account to a VSS ... In my case all I wanted is to be able to get inside VSS 6.0 Admin. ...
    (microsoft.public.vstudio.sourcesafe)
  • Re: Sorting out security
    ... > MS Access security. ... > created a new workgroup, added a password for the Admin role, added ... > remote logins to a secured database. ... The location of the current workgroup file is recorded in the ...
    (microsoft.public.access.security)
  • Re: user level security wizard
    ... the name of the database in this shortcut was not the copy, ... But the error message you got I thought was in reference to the mdw file, ... you said that every mdw file has the admin user and the Users Group ... and the security wizard does this for you. ...
    (microsoft.public.access.security)