Re: Read Only User - One Database

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 10/29/04

  • Next message: Dejan Sarka: "Re: Database Role & Application" 
    Date: Thu, 28 Oct 2004 21:10:48 -0600

    No....nothing about someone creating the guest account but I
    don't know what databases the user is accessing. Which other
    databases? System databases or user databases? Is the user a
    member of other roles or groups that would give them access
    to the other databases?

    -Sue

    On Thu, 28 Oct 2004 19:53:01 -0700, "Dave"
    <Dave@discussions.microsoft.com> wrote:

    >sue i can't see guest account except master database.. you meant somebody
    >created it ?
    >
    >"Sue Hoegemeier" wrote:
    >
    >> Which other databases? Most likely those are databases with
    >> the guest account enabled. If a user doesn't have an account
    >> to log into the database and the guest account is enabled,
    >> the user has access through the guest account and whatever
    >> rights are granted to public and this account. The guest
    >> account cannot be deleted from master or tempdb. It can be
    >> added, delete from other databases.
    >> When you added the user to the db_datareader role, you gave
    >> that user permissions to select from all user tables.
    >> Permissions are cumulative so the user obtains all
    >> permissions through the combination of their individual
    >> account and any groups, roles that they are members of. When
    >> you also gave the individual account select permission on
    >> views, the user ended up with those permissions as well as
    >> select on all user tables.
    >>
    >> -Sue
    >>
    >> On Thu, 28 Oct 2004 17:39:38 -0400, "Adrian Maull \(MCP\)"
    >> <no_spam@no_email.org> wrote:
    >>
    >> >How do I create a user, that has rights to only one database, and only
    >> >select rights to some views?
    >> >
    >> >I created a login in Enterprise Manager; checked the database access only on
    >> >the database the user needs to see; and checked the db_datareader role.
    >> >However, logging in as this user I can see and select from other databases.
    >> >
    >> >Under the database I gave the user rights to, I checked only select rights
    >> >on the views I want the user to select from. I can still select from
    >> >tables, etc.
    >> >
    >> >Obviously, I'm missing something here....
    >> >
    >> >
    >>
    >>

  • Next message: Dejan Sarka: "Re: Database Role & Application"

    Relevant Pages

    • Re: Application Roles across databases in SQL Server 2000
      ... Only grant execute permissions on the procedure to those users/roles whom ... >> I have created a stored procedure on one of the databases ... I have not given the guest account access to ... > chaining for ownership chains to apply to cross-database access. ...
      (microsoft.public.sqlserver.security)
    • E*Trades database systems?
      ... Does anyone know what database vendor and middleware vendors are used ... address information in their multiple databases. ... Account verification forms that popup when the user logs in. ... is unable to remove these forms after a customer has completed it. ...
      (comp.databases)
    • Re: Joining tables from two databases
      ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Hitchhiker's Guide to Visual Studio and SQL Server ... I'm not really following how you are solving it using a service account. ... Are these 2 databases are SQL Server? ...
      (microsoft.public.dotnet.framework.adonet)
    • Re: public role???
      ... The guest user account cannot be removed from ... > databases, but not ... then that's the way SQL Server ...
      (microsoft.public.sqlserver.security)
    • Re: Joining tables from two databases
      ... Hitchhiker's Guide to Visual Studio and SQL Server ... account with rights to both tables. ... to create a connection I need to use a connection ... Are these 2 databases are SQL Server? ...
      (microsoft.public.dotnet.framework.adonet)
    Loading