Does PUBLIC override user-defined roles?

From: Erik Bertrand (EBertrand_at_verizon.net)
Date: 06/06/03

  • Next message: Jasper Smith: "Re: SetSPN problem"
    Date: Fri, 6 Jun 2003 07:07:37 -0700
    
    

    I'm hoping I'm going to word this right...

    We have a database within which the PUBLIC group does not
    have access to any tables. Instead, we've created a user-
    defined role called "ReadAccess" which we're using to
    restrict all but SELECT to the tables in the database.

    This ReadAccess role has the Domain Users group of our
    domain in it, and our server is set to Mixed security.
    When a domain user logs into SQL Analyzer using a Trusted
    connection, the user sees the tables fine and can SELECT
    from them.

    However, when the same user tries to create a report in
    Crystal Reports, the user does not see the tables she has
    SELECT access to.

    I know Crystal is not a Microsoft product, but I'm
    wondering if we need to give some sort of extra access to
    the user to allow them to get a list of tables they have
    access to? By not being a member of the PUBLIC group,
    perhaps they don't have this access by default? Is it
    possible that PUBLIC group membership (or non-membership
    in this case) overrides the rights you have in other user-
    defined roles?

    Thanks for any guidance you can lend.

    EB


  • Next message: Jasper Smith: "Re: SetSPN problem"

    Relevant Pages

    • Re: Security bug report?
      ... I open a login with the login name of somebody who is into the public group ... This person has no specific access on database. ... I can open this view in design mode. ...
      (microsoft.public.access.adp.sqlserver)
    • Re: has_dbaccess() only returns 1 for default database
      ... I removed view permissions from the public group ( ... REVOKE VIEW ANY DATABASE FROM public;) This has worked with all but ODBC ... My first thought is that the ODBC Admin was at fault, ... Links for SQL Server Books Online: ...
      (microsoft.public.sqlserver.security)

    Loading