Re: New user logon and permissions

From: Robert Strickland (strickra_at_rjsonline.net)
Date: 10/29/03 

Date: Wed, 29 Oct 2003 15:57:51 -0500

Thanks

"Kalen Delaney" <replies@public_newsgroups.com> wrote in message
news:uuaiw3lnDHA.1488@TK2MSFTNGP12.phx.gbl...
> Hi Robert
>
> Permissions are granted to usernames, not to logins, so to control
> permissions in master, you must specify the username. Most logins don't
have
> a specific username in master, but master has a guest user, which means
that
> any login can access the database. Thus, permissions are controlled by
> granting/removing/denying to guest user.
>
> It is not recommended that you remove all permissions in master, because
> there are many activities that need master, such as using system
procedures
> and information views.
>
> What exactly are you trying to avoid?
>
> MSDB is a different story. You can remove the guest user with little ill
> effect. You actually can remove the whole database if you want!
>
> --
> HTH
> ----------------
> Kalen Delaney
> SQL Server MVP
> www.SolidQualityLearning.com
>
>
> "Robert Strickland" <strickra@rjsonline.net> wrote in message
> news:Oto79klnDHA.2456@TK2MSFTNGP09.phx.gbl...
> > We would like to remove all permissions for our userid to master and
msdb
> > but there seems to be no way to remove the permissions. Is there a way
to
> do
> > this or is there a need to remove the insert/update/delete/select
> > permissions for logon user ids? What is the best practice for this?
> >
> >
>
>

Relevant Pages

  • Re: master and msdb database permissions
    ... master and msdb through the guest account. ... objects in those databases. ... permissions come from - whatever permissions have been ...
    (microsoft.public.sqlserver.security)
  • RE: Execute permission lost for nonadmin user after db migration with
    ... Your problem is that users are stored in master. ... server to another one that does not have the same users in it's master. ... permissions, remove the permissions, detach the DB, attach the DB and then ...
    (microsoft.public.sqlserver.server)
  • Re: Block User Viewing Vies & Procedures
    ... sp_helptext in master has public execute permissions by default and master ... that didn't work by defining the roles and permissions in the previous post ... Jasper Smith (SQL Server MVP) ...
    (microsoft.public.sqlserver.security)
  • Re: New user logon and permissions
    ... Permissions are granted to usernames, not to logins, so to control ... permissions in master, you must specify the username. ...
    (microsoft.public.sqlserver.security)
  • RE: Flushing User Login Details on Client Machine
    ... there is no need to input username and password after ... If you grant a user "Send on behalf" permissions for another user's ... mailbox, that user can send mail on behalf of the mailbox owner. ... In Microsoft Outlook 2002 and in Microsoft Office Outlook 2003, ...
    (microsoft.public.windows.server.sbs)