Re: Master database can be browsed by any user. is this normal?

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 10/27/04

  • Next message: Steve Ricketts: "Re: One Web Service updates SQL, another can't?" 
    Date: Tue, 26 Oct 2004 20:21:25 -0600

    You can't disable the guest account in master or tempdb.

    -Sue

    On Tue, 26 Oct 2004 16:54:58 -0700, John Dalberg
    <john_dd@hotmail.com> wrote:

    >On Tue, 26 Oct 2004 15:08:19 -0600, Sue Hoegemeier wrote:
    >
    >> Yes...the login would access the database through the guest account.
    >> Guest is a member of the public role so accessing through this account
    >> gives the users whatever rights, permissions granted to the public
    >> role.
    >>
    >> -Sue
    >
    >Is there anyway to disable this? They can read sysusers tables and look at
    >usernames. Although they need to figure out the passwords but why give them
    >half of the data. Also the fact that they can browse the databases names is
    >also an unwelcome feature.
    >
    >John
    >
    >
    >
    >
    >
    >
    >
    >
    >
    >
    >
    >>
    >> On Tue, 26 Oct 2004 13:13:07 -0700, John Dalberg <john_dd@hotmail.com>
    >> wrote:
    >>
    >>>
    >>>I created a sql server type user who has access to a single database which
    >>>I created. When I logged in as the user, I was able to browser and read the
    >>>Master database tables even though there's no login user in the Master
    >>>database for that user. Is this normal behavior?
    >>>
    >>>John

  • Next message: Steve Ricketts: "Re: One Web Service updates SQL, another can't?"

    Relevant Pages

    • Re: db permissions
      ... "Rick Sawtell" wrote: ... >> login and then created a SQL Server login using the same account. ... >> I thought that if you didn't select Permit against a database in the ... > Check those other DB's for a guest account. ...
      (microsoft.public.sqlserver.server)
    • Re: Guest Account
      ... The guest accout is a way for people to access a database - NOT the sever. ... There is no login that is directly associated with guest... ... As for the guest account in Northwind/Pubs - yes, ...
      (microsoft.public.sqlserver.security)
    • Re: db permissions
      ... > login and then created a SQL Server login using the same account. ... > I thought that if you didn't select Permit against a database in the ... Check those other DB's for a guest account. ...
      (microsoft.public.sqlserver.server)
    • Re: Networking -- XP and Win 98
      ... The problem arises from the need to upgrade an application.. ... application database is m.s.access based. ... Enable the Guest account for network access. ... Do you want to simply access the Windows XP computer from ...
      (microsoft.public.windowsxp.network_web)
    • Re: Master database can be browsed by any user. is this normal?
      ... Yes...the login would access the database through the guest account. ... Guest is a member of the public role so accessing through this account ...
      (microsoft.public.sqlserver.security)