RE: how to deal with public role?

From: Kevin McDonnell [MSFT] (kevmc_at_online.microsoft.com)
Date: 09/11/04

  • Next message: Kevin McDonnell [MSFT]: "Re: Can't edit logins or server roles" 
    Date: Fri, 10 Sep 2004 23:22:44 GMT

    http://www.microsoft.com/technet/prodtechnol/sql/2000/maintain/sp3sec02.mspx

    Do Not Grant Permissions to the Public Role

    All databases contain a public database role of which all users, groups and
    roles are members. Do not grant additional permissions to this role.
    Granting permissions to public effectively grants them to all users of the
    database, including application roles, database roles, and individual
    users.

    The best practice is to grant specific, required permissions to select
    users, roles, or groups.

    Thanks,

    Kevin McDonnell
    Microsoft Corporation

    This posting is provided AS IS with no warranties, and confers no rights.

  • Next message: Kevin McDonnell [MSFT]: "Re: Can't edit logins or server roles"

    Relevant Pages

    • Re: Web Parts
      ... I'm not real familiar with the Members Web Part. ... Maybe you're account doesn't have enough permissions in the area/portal ... I'd just have to assume that Web Part will not work in SPS, just WSS. ... grant them permissions)? ...
      (microsoft.public.sharepoint.portalserver)
    • Re: Why securities disappear in SQL Server 2005 ?
      ... grant the INSERT permission on the authors table to another user. ... PRINT 'You may not GRANT INSERT permissions on authors.' ... database role then from role securities tab i assign permissions to ... securities to users then everything is ok, ...
      (microsoft.public.sqlserver.security)
    • Re: Active Directory Permissions
      ... I would like to be able to grant certain members of the IT department ... using "active directory for users and computers". ... permissions. ...
      (microsoft.public.windows.group_policy)
    • Re: automating roles creation on SQLserv2000
      ... You could create a script using system stored procedures (sp_addrole, ... sp_addrolemember) an GRANT to set up the roles, members and role ... permissions. ...
      (microsoft.public.sqlserver.security)
    • Re: USERS group has the ability to change security permissions???
      ... Please use the Advance view in the NTFS permissions dialog to ... When there is a generic grant and a special grant to the same entity ... the RESULT: user level access can change NTFS ...
      (microsoft.public.win2000.security)