RE: BDO view objects in Enterprise Manager

From: Bill Hollinshead [MS] (billhol@online.microsoft.com)
Date: 10/21/02 

From: billhol@online.microsoft.com ("Bill Hollinshead [MS]")
Date: Mon, 21 Oct 2002 21:00:00 GMT

Hi Mike,

>From http://msdn.microsoft.com/library/en-us/architec/8_ar_da_8yur.asp:
{
If a database has no guest user account, a login cannot access the database
unless it has been associated with a valid user account.
}
IOW, once you explicitly add the user to the database, the database's
objects will be visible to that user.

However, this dosen't fit with your observation that these users are
database owners <g>, so, how are you determining they are database owner?
And what steps were followed to remove guest? If you directly deleted guest
from sysusers then please see
http://support.microsoft.com/support/kb/articles/q315/5/23.asp.

Perhaps select from a database's sysusers with a compare/join
master..sysxlogins by sid and/or name, or (for SQL Server logins) a report
mode run of sp_change_users_login will reveal some additional information
(such as orphaned users). If the user is found, then sp_helpuser will
return that user's database roles (including the db_owner fixed database
role).

BTW, if the model database has the guest user then all new databases will
the guest user as well since the databases are all based upon/templated
from the model database.

Thanks,

Bill Hollinshead
Microsoft, SQL Server

This posting is provided "AS IS" with no warranties, and confers no
rights. Subscribe to MSDN & use http://msdn.microsoft.com/newsgroups.

Relevant Pages

  • Re: Script A Login
    ... exacutes a number of stored procedures against the database, ... Login and User ... I restore databases all the time and don't need to re-create logins or ... The user account should have been in the database ...
    (microsoft.public.sqlserver.security)
  • Re: Script A Login
    ... When you create a Windows Login it identifies that Login by using the windows account SID which is unique. ... So you can take a DB from any server and plop it down (restore it) on any other server and the two will always match up. ... When I restore a database, all of the database User Accounts and Database Roles are restored. ... When I restore a backup, are you saying the connection between the SQL Login in the server and the User Account in the database is broken? ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Default Login?
    ... Would it pose a security concern if the default login is ... I mean having a guest user is as good as allowing ... >they haven't been explicitly granted database access. ...
    (microsoft.public.sqlserver.security)
  • Re: How to remove `guest as Default Login ID in MSSQL2000?
    ... "guest" is not a login but is a database user. ... The guest user account allows a login without a user account to access a ... A login assumes the identity of the guest user when both of the ...
    (microsoft.public.sqlserver.security)
  • Re: Application Role and access to other databases
    ... > databases (using a single login), and then restore the database that I ... You can change the owner of an existing database with sp_changedbowner. ... > both a SQL Server Login account and an integrated login, ... > such users don't have access to the database with only a guest user ...
    (microsoft.public.sqlserver.security)