SQL 6.5 - Rights - Not Working Correctly
From: Dave (dnajac@ezecastlesoftware.com)
Date: 10/01/02
- Next message: solex: "Access and Integrated Security"
- Previous message: Dave: "SQL 6.5 - Rights - Not Working Correctly"
- In reply to: Dave: "SQL 6.5 - Rights - Not Working Correctly"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Dave" <dnajac@ezecastlesoftware.com> Date: Tue, 1 Oct 2002 13:34:27 -0700
I figured out the issue and thought I would share it in
the event that someonelse every encounters this issue-
At some point, someone granted the SQL PUBLIC role with
full access to all objects in the database, thus it didn't
matter what specific rights you granted via user-defined
groups, as the user was receiving the additional rights
via it's membership in PUBLIC.
ex:
1. You give members of the ReadOnly role SELECT rights to
Table1
2. The PUBLIC role has SELECT, INSERT, UPDATE & DELETE
rights to Table1
3. The end result is that anyone in the ReadOnly role can
INSERT, UPDATE & DELETE from Table1 due to their inherited
rights in the PUBLIC role.
>-----Original Message-----
>I have one particular SQL 6.5 server that I am having a
>rights issue with for certain SQL users that are a member
>of a restricted rights group in one of the databases on
>the server. As an example, I have a user named 'Dave'
>that is a member of the group 'ReadOnly' in database
XYZ.
>In the XYZ database there is a table named Table1 that
>allows the 'ReadOnly' group to have SELECT access only
(no
>other rights or restrictions). The stange thing is that
>this user is able to INSERT, UPDATE and DELETE records in
>this table (he is not a member of any other groups, dbo,
>etc). The same configuration on other SQL 6.5 servers
>works fine. Has anyone encountered this issue before?
>
>Thanks,
>Dave
>.
>
- Next message: solex: "Access and Integrated Security"
- Previous message: Dave: "SQL 6.5 - Rights - Not Working Correctly"
- In reply to: Dave: "SQL 6.5 - Rights - Not Working Correctly"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|