Re: Master database can be browsed by any user. is this normal?

From: John Dalberg (john_dd_at_hotmail.com)
Date: 10/27/04 

Date: Tue, 26 Oct 2004 16:54:58 -0700

On Tue, 26 Oct 2004 15:08:19 -0600, Sue Hoegemeier wrote:

> Yes...the login would access the database through the guest account.
> Guest is a member of the public role so accessing through this account
> gives the users whatever rights, permissions granted to the public
> role.
>
> -Sue

Is there anyway to disable this? They can read sysusers tables and look at
usernames. Although they need to figure out the passwords but why give them
half of the data. Also the fact that they can browse the databases names is
also an unwelcome feature.

John

>
> On Tue, 26 Oct 2004 13:13:07 -0700, John Dalberg <john_dd@hotmail.com>
> wrote:
>
>>
>>I created a sql server type user who has access to a single database which
>>I created. When I logged in as the user, I was able to browser and read the
>>Master database tables even though there's no login user in the Master
>>database for that user. Is this normal behavior?
>>
>>John

Relevant Pages

  • Re: Newbie: I dont understand user permissions for table access
    ... >My database is remote to my workstation. ... >> HOW are you connecting to SQL Server? ... >> If you are using NT auth, what rights does your NT ... the PUBLIC role? ...
    (microsoft.public.sqlserver.server)
  • Re: PUBLIC ROLE
    ... think of the Public role as being very much ... > If I create a database called "TEST" and make a user George database ... you grant those permissions to the public role. ...
    (microsoft.public.sqlserver.security)
  • Re: Public Role in SQL Server 2000 SP3
    ... The public role is a special database role to which every database user ... Captures all default permissions for users in a database. ... Hari is a database owner and he create a table customer. ...
    (microsoft.public.sqlserver.server)
  • Re: new userID can do all...
    ... Being in the public role in a database shouldn't give you access to do ... >>>> No server roles have been assigned. ... >>> Does he have administrative rights to the box ...
    (microsoft.public.sqlserver.security)
  • Re: Remove permissions in default Public Role?
    ... functionality. ... in a database or when connecting to a database server. ... You'd want to make sure you are not granting permissions to ... happening because of the Public Role in the Master db. ...
    (microsoft.public.sqlserver.security)