Re: What exactly can PUBLIC ROLE do in SqlServer?

From: Kalen Delaney (kalen_please_reply_on_public_newsgroups_delaney@compuserve.com)
Date: 03/30/03

  • Next message: cathy h. zheng: "MDF file" 
    From: "Kalen Delaney" <kalen_please_reply_on_public_newsgroups_delaney@compuserve.com>
Date: Sat, 29 Mar 2003 19:59:24 -0800

    Can you elaborate on exactly what you did to cause execution of the stored
    procedures in master to fail?

    The permissions that the PUBLIC role has are exactly what you see when you
    run sp_helprotect.

    If someone in the public role (meaning anybody or everybody) got an error
    trying to execute something basic like sp_help, my guess is that you either
    accidentally recreated sp_help with a different owner, or tried to have the
    user execute the code that makes up sp_help, instead of directly executing
    sp_help.

    If you tell us what you did exactly, we can tell you why you got the
    behavior you saw. 

    --
Kalen Delaney
SQL Server MVP
www.SolidQualityLearning.com
"Kanthi Mathi" <kanthi_mathi@hotmail.com> wrote in message
news:006901c2f5ce$0347cb20$3401280a@phx.gbl...
> Hi all,
>
> I need to know what exactly a PUBLIC ROLE is capable of
> doing in Master database. I issued sp_helprotect and
> gathered info about PUBLIC. Sp_helprotect does give the
> list of SPs that PUBLIC can execute, but when I test them,
> they fail because PUBLIC doesn't have the required
> permissions on their corresponding tables.
>
>
> Does anybody have the list of activities that PUBLIC is
> really capable of doing in Master database?
>
> I am looking for this info to define the security
> standards for SqlServer in our organisation.
>
> Thanks a lot for all your help.
>
  • Next message: cathy h. zheng: "MDF file"

    Relevant Pages

    • Re: SQL 2005 public role
      ... He can use EXECUTE AS in order to avoid granting permissions on the ... stored procedure (be aware if you are using dynamic sql within this sp, ... I've granted execute permissions for stp_LogError to the public role. ...
      (microsoft.public.sqlserver.security)
    • Re: PROJ 2000: Inserted Projects not found
      ... The schedule is inserted linked to the ... If it is and you edit the path in the master but don't also change ... > suggestion of using a message box to clear out the sendkeys buffer, ... > Halted, and if it's been halted, then execute the SendKeys ...
      (microsoft.public.project.vba)
    • Re: Minor Public School
      ... Paul Wolff wrote: ... I intended to try to sell my last computer, so I changed the master ... What good is being an executive if you never get to execute anyone? ...
      (alt.usage.english)
    • Re: xp_cmdshell
      ... Wouldn't it be more secure to create a db user in the master db for the user ... who actually NEED to execute the xp_cmdshell and then assign him/her, alone, ... > down security this box is now checked by default. ... >> We have an application which executes a stored procedure to either ...
      (microsoft.public.sqlserver.security)
    • How do I execute xp_sendmail on a shared SQL Server ?
      ... I dont have permissions on the 'master' DB. ... Any Ideas on how I can execute extented stored procs in ...
      (microsoft.public.sqlserver.security)