Home > Archive > MS SQL Server security > November 2005 > SQL 2005 user limit









You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

 

Author SQL 2005 user limit
Marcin S.

2005-11-10, 7:23 am

Hi,

In SQL 2005 it was not possible to limit a user to list all databases is it
possible in SQL 2005? I cant fid any info about this issue.

Main problem: a user should anly see hes/her own database

(this is supported by MYSQL for long time now)


--
-----------------------
Marcin S.
Andrew J. Kelly

2005-11-10, 9:23 am

I assume you meant it wasn't possible in SQL2000? Yes it is possible in
2005. As a matter of fact by default a user will only see objects that they
have permissions to. This even pertains to things like SQL Agent. If the
user is not a member of one of the Agent roles they won't even see the Jobs
node. You can even filter what objects you do see even if you have the
permissions to view them.

--
Andrew J. Kelly SQL MVP


"Marcin S." <MarcinS@discussions.microsoft.com> wrote in message
news:93FD6DFA-DB57-4413-8C01- 8EF038246FD1@microso
ft.com...
> Hi,
>
> In SQL 2005 it was not possible to limit a user to list all databases is
> it
> possible in SQL 2005? I cant fid any info about this issue.
>
> Main problem: a user should anly see hes/her own database
>
> (this is supported by MYSQL for long time now)
>
>
> --
> -----------------------
> Marcin S.



Marcin S.

2005-11-10, 9:23 am

Hi,

I just created two databases and two users but both users can see eachothers
databases. Is there eny example on technet/msdn?

--
-----------------------
Marcin S.


"Andrew J. Kelly" wrote:

> I assume you meant it wasn't possible in SQL2000? Yes it is possible in
> 2005. As a matter of fact by default a user will only see objects that they
> have permissions to. This even pertains to things like SQL Agent. If the
> user is not a member of one of the Agent roles they won't even see the Jobs
> node. You can even filter what objects you do see even if you have the
> permissions to view them.
>
> --
> Andrew J. Kelly SQL MVP
>
>
> "Marcin S." <MarcinS@discussions.microsoft.com> wrote in message
> news:93FD6DFA-DB57-4413-8C01- 8EF038246FD1@microso
ft.com...
>
>
>

Andrew J. Kelly

2005-11-10, 9:23 am

What permissions do these users have?

--
Andrew J. Kelly SQL MVP


"Marcin S." <MarcinS@discussions.microsoft.com> wrote in message
news:34EA31D1-6F12-4212-962E- 0DEC79DD3428@microso
ft.com...[color=darkred]
> Hi,
>
> I just created two databases and two users but both users can see
> eachothers
> databases. Is there eny example on technet/msdn?
>
> --
> -----------------------
> Marcin S.
>
>
> "Andrew J. Kelly" wrote:
>


Marcin S.

2005-11-10, 9:23 am

db_reader
db_writer
db_owner




--
-----------------------
Marcin S.


"Andrew J. Kelly" wrote:

> What permissions do these users have?
>
> --
> Andrew J. Kelly SQL MVP
>
>
> "Marcin S." <MarcinS@discussions.microsoft.com> wrote in message
> news:34EA31D1-6F12-4212-962E- 0DEC79DD3428@microso
ft.com...
>
>
>

Marcin S.

2005-11-10, 11:23 am

Hi,

I did find it the database must be owned by the user.

-----------------------
Marcin S.


"Andrew J. Kelly" wrote:

> What permissions do these users have?
>
> --
> Andrew J. Kelly SQL MVP
>
>
> "Marcin S." <MarcinS@discussions.microsoft.com> wrote in message
> news:34EA31D1-6F12-4212-962E- 0DEC79DD3428@microso
ft.com...
>
>
>

Andrew J. Kelly

2005-11-10, 8:23 pm

Well those are pretty open permissions.

--
Andrew J. Kelly SQL MVP


"Marcin S." <MarcinS@discussions.microsoft.com> wrote in message
news:FB7637DD-963C-42F2-8EB2- 22704875BDDC@microso
ft.com...[color=darkred]
> db_reader
> db_writer
> db_owner
>
>
>
>
> --
> -----------------------
> Marcin S.
>
>
> "Andrew J. Kelly" wrote:
>


Sponsored Links





Also available: Server administration forum archive | Web Design forum archive | Software forum archive | Hardware reviews archive | Programming forum archive

Copyright 2009 droptable.com