Re: system tables security

From: Stephanie (stephaniebelding@hotmail.com)
Date: 01/08/03 

From: "Stephanie" <stephaniebelding@hotmail.com>
Date: Tue, 7 Jan 2003 22:58:39 -0800

Think I'm just a bit confused/paranoid; cause if I go to
EM and look at the Database User Properties Permission for
Database User: dbo, and 'List only objects with
permissions for this user' the Owner dbo has Select,
Insert, Update, Delete and DRI permission,,

I checked the Server Properties Under Server behavior, and
the Allow modifications to be made directly to the system
catalogs check box is clear.

Why I'm concerned is that 5 powerbuilder catalog tables
have been added to the master db and I'm not sure exactly
how this was done, the developer has deleted them from the
database and wants them restored...

>-----Original Message-----
>Hi Stephanie,
>
> When it comes to system tables, SQL Server by default
does not allow
>direct updates to these tables anyway, even for a
sysadmin user.
>
>You need to turn on sp_configure 'allow updates',1 to
allow updates to
>system tables. Execute permisions for the sp_configure
stored procedure
>without any parameters is available to all users, but to
execute this with
>any parameters requires the user to be a part of the
sysadmin or serveradmin
>role. So, you don't really have to worry about DBO
permission users being
>able to modify these.
>
>HTH,
>Mandar
>
>"stephanie" <stephaniebelding@hotmail.com> wrote in
message
>news:16e701c2b6d8$36f60840$8ef82ecf@TK2MSFTNGXA04...
>> How do I make sure that users can not directly modify
any
>> of the system tables?? I'm worried that for certain
>> developers who I give dbo permissions to selected
>> development databases can modify system tables,, what's
>> the best preventive practice to make sure modifications
>> are not a possibility..
>>
>> Thanks..
>> Steph
>
>
>.
>

Relevant Pages

  • Re: db_owner role in SQL 2k
    ... DBO is just a user ... > I presume then that you are logged in as tfs. ... I am logged on to my server as tfs when I do the 2 selects ... permission - and tfs - which is sysadmin - I would have assumed that EM ...
    (microsoft.public.sqlserver.programming)
  • Re: Long delay before Drives & Files appear in My Computer & Address Bar
    ... > SERVICE JEFF-DZP8HX39G2 The machine-default permission settings do not ... > grant Local Activation permission for the COM Server application with ... > Ratcliff JEFF-DZP8HX39G2 The Adobe LM Service service was successfully ... > within the required timeout. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Network shares cannot connect
    ... After a reboot, domain users cannot access any shares on the SBS server, ... Microsoft Online Newsgroup Support ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, ...
    (microsoft.public.windows.server.sbs)
  • Re: System.Security.SecurityException was unhandled
    ... Is it a must that I need to register the COM server to the machine using ... CAS permissions on the client machine, and the COM issue is a new problem. ... assembly actually has the permission in question. ... When I execute the application I received and error message. ...
    (microsoft.public.dotnet.security)
  • Re: System.Security.SecurityException: Request
    ... but this may be because my local server does not have ... for the permission of type ... eventArgument) +7 ... Mscorlib.dll controls the access to the user environment variables. ...
    (microsoft.public.dotnet.framework.aspnet)
Loading