Re: dbo role and modify filesize of database

From: Dan Guzman (danguzman_at_nospam-earthlink.net)
Date: 02/26/04


Date: Thu, 26 Feb 2004 08:32:06 -0600


> If I create a database and give to the database user
> dbo role membership he is able to change size of datafiles
> mdf and ldf. How can i suppress that so that this is no longer
> possible?

Don't add the user to the db_owner role :-)

Membership of db_owner, sysadmin, etc. have powerful rights that (hopefully)
aren't needed for routine application functionality. Normally, one can
create user-defined rules with appropriate object permissions and control
access via role membership.

What application requirement do you have that currently necessitates
db_owner role membership? Perhaps we can come up with an alternative
solution.

-- 
Hope this helps.
Dan Guzman
SQL Server MVP
"Mickey Red" <mred@red.com> wrote in message
news:Xns949B50872244AMRed@216.196.97.131...
> Hi
>
> If I create a database and give to the database user
> dbo role membership he is able to change size of datafiles
> mdf and ldf. How can i suppress that so that this is no longer
> possible?
>
> Kind regards
>
> Mickey


Relevant Pages