Re: Read Only User - One Database

From: Dave (Dave_at_discussions.microsoft.com)
Date: 10/29/04

  • Next message: Sue Hoegemeier: "Re: Read Only User - One Database" 
    Date: Thu, 28 Oct 2004 19:53:01 -0700

    sue i can't see guest account except master database.. you meant somebody
    created it ?

    "Sue Hoegemeier" wrote:

    > Which other databases? Most likely those are databases with
    > the guest account enabled. If a user doesn't have an account
    > to log into the database and the guest account is enabled,
    > the user has access through the guest account and whatever
    > rights are granted to public and this account. The guest
    > account cannot be deleted from master or tempdb. It can be
    > added, delete from other databases.
    > When you added the user to the db_datareader role, you gave
    > that user permissions to select from all user tables.
    > Permissions are cumulative so the user obtains all
    > permissions through the combination of their individual
    > account and any groups, roles that they are members of. When
    > you also gave the individual account select permission on
    > views, the user ended up with those permissions as well as
    > select on all user tables.
    >
    > -Sue
    >
    > On Thu, 28 Oct 2004 17:39:38 -0400, "Adrian Maull \(MCP\)"
    > <no_spam@no_email.org> wrote:
    >
    > >How do I create a user, that has rights to only one database, and only
    > >select rights to some views?
    > >
    > >I created a login in Enterprise Manager; checked the database access only on
    > >the database the user needs to see; and checked the db_datareader role.
    > >However, logging in as this user I can see and select from other databases.
    > >
    > >Under the database I gave the user rights to, I checked only select rights
    > >on the views I want the user to select from. I can still select from
    > >tables, etc.
    > >
    > >Obviously, I'm missing something here....
    > >
    > >
    >
    >

  • Next message: Sue Hoegemeier: "Re: Read Only User - One Database"

    Relevant Pages

    • Re: Execute Persmission denied on object sp_OACreate
      ... If so what access and permissions. ... The account is a windows account. ... One method to test permissions is to log in to your SQL Server box using the ... >>> SA account password and gaining access to the database. ...
      (microsoft.public.sqlserver.security)
    • Re: Cant Remember How to Setup User Accounts
      ... I don't like having the guest account enabled on an XP Pro computer as it ... Then you can use NTFS folder permissions to manage what users on your ... EFS file encryption built in. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Access database, network access problems
      ... It turns out it is a permissions problem, but, the cause is still unknown. ... If I was to replace this account with my own, the connection works, and I ... webserivce that returns data from a small access database; ... > engine will attempt to create an .LDB file. ...
      (microsoft.public.dotnet.framework.adonet)
    • Re: Business Data Catalog (BDC) -- Does Not Work -- Sharepoint 2007 Beta
      ... following grant permissions: ... TSQL Local Machine ... Also both have Permission to Connect to Database engine set to Grant ... Application Settings->Server process account for the BDC is selected ...
      (microsoft.public.sharepoint.portalserver)
    • Re: Read Only User - One Database
      ... database user are members of public. ... If a user doesn't have an account ... >> to log into the database and the guest account is enabled, ... >> that user permissions to select from all user tables. ...
      (microsoft.public.sqlserver.security)