Re: Read-Only Access
From: Wayne (anonymous_at_discussions.microsoft.com)
Date: 02/26/04
- Next message: Wayne: "Auto-Broadcast with unscheduled shutdown"
- Previous message: removethis: "Permissions granted from Domain credentials"
- In reply to: Hari: "Re: Read-Only Access"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 26 Feb 2004 08:31:11 -0800
Hello Hari.
THKS for all your feedback.
1. I haven't tested it yet - but are u saying anyone with
a login into 'any' database, can use EM to see wot's on
there, who'd doin' wot and wot login accounts there are!
- I am actually trying to grant a database for a project
team to manage themselves, but don't want them to be abled
to look at other objects within EM apart from their own
database - it sounds like this is NOT possible.
2. As for 2, I have read the MS documents, and it states
(unless it was a misprint) that if u are a member of
DB_OWNER and NOT SYSADMIN, the object owner will the login
name. I want to enforce all objects belonging to DBO,
since past experiences shows there would be future issues
if say for example the login the created the objects need
to be changed or removed.
This is my soln (wot u think?):
1. I have not granted anyone rights to created objects in
the production server. The developers will have to test it
on the DEV/TEST servers, then passed the scripts onto me
to implement onto the PROD server
2. I will still grant a small number of people (within my
own team) as a member of DB_OWNER (but not SYSADMIN) and
hence when (if) they create an object, I get then to
change the object owners to dbo (sp_changeobjectowner) -
if they do not have the right, then they will inform me
which objects are created and I will change the ownership
myself.
Cheers mate again for all your feedback.
rgds.
Wayne (PS: are u a MCDBA for SQL7 or/both SQL2000?)
>-----Original Message-----
>Hi Wayne,
>
>EM can be used by a normal user with a public role. But
to access the
>objects, he should need privileges / Roles.
>
>1. With a normal user you can see the process info (See
all users
>connected), Can also execute sp_who from query analyzer.
>2. We have to be a member of DB_OWNER role to create
objects with
>dbo.objectname. Otherwise object will created with his
prefix
> username.objectname.
>
>Did I answer your question correctly ?
>
>Thanks
>Hari
>MCDBA
>
>
>
>"Wayne" <anonymous@discussions.microsoft.com> wrote in
message
>news:12d401c3fb90$9fe89c70$a301280a@phx.gbl...
>> DAMN - I knew there was something like that! I was
looking
>> at the db_denydatawriter all along!
>>
>> Cheers anyway!
>>
>> U wouldn't know if there is a way of granting db_owner
to
>> a user (so s/he can also use EM) - but:
>> 1. Cannot see other people's login on the server
>> 2. When creating objects, he can assign the owner
>> as 'dbo.object' BUT without s/he being a member of the
>> sysadmin server role?
>>
>> Cheers in advanced!
>> >-----Original Message-----
>> >Hi,
>> >
>> >Assign DB_datareader role to the user.
>> >
>> >sp_addrolemember 'db_datareader', 'user_name'
>> >
>> >Thanks
>> >Hari
>> >MCDBA
>> >
>> >
>> >
>> >
>> >"Wayne" <anonymous@discussions.microsoft.com> wrote in
>> message
>> >news:10d201c3fb88$ab5ba5a0$a501280a@phx.gbl...
>> >> Apart from being a member of db_owner (having full
>> >> read/write to the database) - I I need to grant a
user
>> to
>> >> have only READ-ONLY to database with 500 tables -
what
>> do
>> >> I do?
>> >>
>> >> Thks!
>> >
>> >
>> >.
>> >
>
>
>.
>
- Next message: Wayne: "Auto-Broadcast with unscheduled shutdown"
- Previous message: removethis: "Permissions granted from Domain credentials"
- In reply to: Hari: "Re: Read-Only Access"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
