Permissions for database

From: Steve (smartin@cambridgeassociates.com)
Date: 08/22/02


From: "Steve" <smartin@cambridgeassociates.com>
Date: Thu, 22 Aug 2002 13:53:34 -0700


This is a common problem. The best way I have found to
solve this problem is to use NT Authentication and roles.
It will also work with mixed mode security.

For each database, create a developer role and a Readonly
role (Can use public for this role too) For the owner of
the database, give that person dbo rights using
sp_ADDALIAS [User Login], 'dbo' (See Books on Line) This
would give that person(s) the right to create objects and
grant permissions for that object. The developers can be
given rights via the developer role which you can grant
Insert,Update,Delete,Select and Reference to and execute
for any stored procedures. For anyone using the
application, you can add them to the Readonly role which
should have select permissions and execute permissions.

Hope this helps

Steve

>-----Original Message-----
>Hi!
>We have several databases on SQL-Server with a number of
>developers. To define a user to access to a database we
>make him a local administrator on a server. We'd like to
>change this to something more useful as defining
>permissions for developers without making'em
>administrators. We tried to define login for a database,
>but it hasn't succeeded.
>We'd appretiate any help from you on the issue above.
>Thanks in advance.
>.
>



Relevant Pages

  • Re: dbo role and modify filesize of database
    ... If your developers need permission to create objects owned by other users, ... permissions on them but will not be able to alter the database. ... Another technique is to just grant them CREATE permissions for the ... >> permissions and control access via role membership. ...
    (microsoft.public.sqlserver.security)
  • Re: Restrict access to single db from members of server administrator role
    ... Sysadmin role members have full permissions and you can't deny/revoke ... It seems to me that your support database belongs on the 'live' ... server rather than the development one. ... developers full access to the development instance while protecting your ...
    (microsoft.public.sqlserver.security)
  • SQL Server Role Security
    ... I have a group of developers that I want to allow permissions to ... create/alter table structures in a particular database. ... them rights to alter the database itself just rights to alter the structures ... DevAdmin is a Windows 2K Group containing the developers. ...
    (microsoft.public.sqlserver.security)
  • Re: List Users Permissions down to table.column action
    ... THIS STORED PROCEDURE GENERATES COMMANDS ... -- FIXED PROBLEMS WITH STATEMENT LEVEL PERMISSIONS GRANTING. ... -- CREATE TABLE TO HOLD LIST OF USERS IN CURRENT DATABASE ... -- GRANT USER ACCESS TO SERVER ROLES ...
    (microsoft.public.sqlserver.security)
  • Re: User access on a company intranet
    ... Yes they need full permissions on the folder where the backend is. ... You wouldn't need to do this in your copy of the database. ... However you can toggle the shiftkey bypass from another mdb file. ... When you want to implement security, you create a new mdw file, ...
    (microsoft.public.access.security)