Re: Determining User's Effective Rights

From: Bob Hilton (bhilton@psmanagement.net)
Date: 10/27/02 

From: "Bob Hilton" <bhilton@psmanagement.net>
Date: Sat, 26 Oct 2002 17:15:33 -0700

BP, thanks for the reply - PERMISSIONS only works for the
current user. I'm trying to find something where I can
checkout a particular user without having to be logged in
as that person. Enterprise Manager almost gets there but
only shows the Roles' rights. I need to be able to easily
check, proactively, whether a given user has all the
necessary rights and conversely check who has rights to
certain functions, stored procedures and/or tables to make
sure that someone hasn't inadvertantly given rights to a
user who should not have them.

>-----Original Message-----
>Bob,
>
>See is the T-SQL PERMISSIONS built-in function provides
you what you need.
>Documentation on the PERMISSIONS function can be found in
the SQL Server
>2000 Books Online.
>
>-------------------------------------------
>BP Margolin
>Please reply only to the newsgroups.
>When posting, inclusion of SQL (CREATE TABLE ...,
INSERT ..., etc.) which
>can be cut and pasted into Query Analyzer is appreciated.
>
>"Bob Hilton" <bhilton@psmanagement.net> wrote in message
>news:25a601c27d0b$be5d4110$35ef2ecf@TKMSFTNGXA11...
>> I am using Windows 2000 and SQL Server 2000 in Windows
>> Authentication mode in a single domain with 40 servers.
>> Users are Members of Functional Groups with a
>> corresponding Role in SQL 2000. Users may be in more
than
>> one Windows 2000 Group and the corresponding groups'
Roles
>> may be members of multiple application Roles within the
>> database. Is there a tool that will allow me to
determine
>> the Effective Rights for a given user? sp_helpuser
>> reports for the "domain" groups but does not go to the
>> individual users. With over a dozen groups and hundreds
>> of users, this is a real bear to do by hand.
>>
>> Any help with ideas or tools is greatly appreciated.
>>
>
>
>.
>

Relevant Pages

  • Re: FC3 - trying to join a Windows Workgroup
    ... >> difference between your SAMBA server and any Windows box on your network ... I have Windows 2003 servers that I'm trying to ... Share permissions!= filesystem permissions. ... give the TESTSHARE group rights to the share, ...
    (linux.redhat.misc)
  • Re: file server
    ... Access Based Enumeration is available with W2K3 SP1. ... * This posting is provided "AS IS" with no warranties and confers no rights! ... In Windows, you must explicitly share a directory for it to become ... you only see directories and files you have permissions for. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Security Question
    ... You will give the clients connect rights to the server. ... Give that application role permissions to the tables. ... In your application before you run the report active the application role ... As a dept we are transitioning out of Access and into SQL Server ...
    (microsoft.public.sqlserver.security)
  • Re: Help: How to restore to default NTFS security/file permissions
    ... For starters, I am unable to run System Restore, User Groups, Windows ... Win Explorer, the little dog appears but that's about it. ... uninstalling AVG but I didnt have the rights to do so. ... Then I changed the permissions of the AVG directory and I could delete ...
    (microsoft.public.windowsxp.general)
  • Re: Setting perm. on stored procedures using windows auth.
    ... windows account and are in the local windows administrators group, ... I support the Professional Association of SQL Server and it community ... I added that 1 user to a database role and I set execute ... > permissions for some stored procedures in my database. ...
    (microsoft.public.sqlserver.security)