Re: PUBLIC ROLE

From: Mark Broadbent (nospam-mark.broadbent@virgin.net)
Date: 04/14/03 

From: "Mark Broadbent" <nospam-mark.broadbent@virgin.net>
Date: Mon, 14 Apr 2003 09:55:10 +0100

In addition to BPs comments, think of the Public role as being very much
like the NT Authenticated Users group. All users belong to this because they
have a login account, you cannot exclude people from this role (unless you
remove their access account

Its a bit like saying that a Tiger belongs to the Cat family (we know this
because its a mammal, has four legs whiskers and sharp claws and
purrs...allegedly) 

--
BR,
Mark Broadbent mcse+i, mcdba
_________________________
"BP Margolin" <bpmargo@attglobal.net> wrote in message
news:#QMBdHEADHA.2368@TK2MSFTNGP10.phx.gbl...
Marie,
> If I create a database called "TEST" and make a user George database
> access to this database as "public" can George insert, delete or
> update data in the tables in that database?
Not automatically. George will have INSERT, DELETE and UPDATE **only** if
you grant those permissions to the public role. If you do grant those
permissions to the public role, then every user will, by default, have those
permissions. But even with a set of "default permissions" ... i.e., those
granted to the public role, you can see prevent George from doing anything
by DENYing him these permissions. DENYs take precedence over GRANTs.
-------------------------------------------
BP Margolin
Please reply only to the newsgroups.
When posting, inclusion of SQL (CREATE TABLE ..., INSERT ..., etc.) which
can be cut and pasted into Query Analyzer is appreciated.
"Maria Rein" <lugnut@mindspring.com> wrote in message
news:b6419d83.0304110737.ea3186c@posting.google.com...
> Hi,
>
> What exactly is the public role. In BOL it states:
>
> The public role is a special database role to which every database
> user belongs.
>
> The public role: Captures all default permissions for users in the
> database.
>
> What are default permissions?
>
> If I create a database called "TEST" and make a user George database
> access to this database as "public" can George insert, delete or
> update data in the tables in that database?
>
> Thanks,
> Marie

Relevant Pages

  • Re: change user1 access changes user2 access
    ... > Using the public role is your problem. ... >permission you are granting All users the permissions. ... I click on New Login. ... >> name, a password, I select a database to login to, then ...
    (microsoft.public.sqlserver.security)
  • Re: change user1 access changes user2 access
    ... Using the public role is your problem. ... All users, whether it be User1, ... permission you are granting All users the permissions. ... > name, a password, I select a database to login to, then go ...
    (microsoft.public.sqlserver.security)
  • Re: Newbie: I dont understand user permissions for table access
    ... > My database is remote to my workstation. ... > tables/fields WITHOUT specifying anything in the permissions dialogs? ... >> HOW are you connecting to SQL Server? ... what rights/permissions have been granted to the PUBLIC role? ...
    (microsoft.public.sqlserver.server)
  • Re: Public Role in SQL Server 2000 SP3
    ... The public role is a special database role to which every database user ... Captures all default permissions for users in a database. ... Hari is a database owner and he create a table customer. ...
    (microsoft.public.sqlserver.server)
  • Re: new userID can do all...
    ... Being in the public role in a database shouldn't give you access to do ... >>>> No server roles have been assigned. ... >>> Does he have administrative rights to the box ...
    (microsoft.public.sqlserver.security)