Re: users and logins

From: Jens Süßmeyer (Jens_at_Remove_this_For_Contacting.sqlserver2005.de)
Date: 04/20/05

  • Next message: Hoof Hearted: "Re: Restored Backup problem"
    Date: Wed, 20 Apr 2005 19:29:52 +0200
    
    

    So, i think that your only qquestins, eh ?

    What is the differnce between managing Logins under the Security folder in
    the EM and managing Logins from the User object in a database?

    -Users must be created at server level to grant them permissions at database
    level.
    -At the database level you can only give them permissions to the database,
    to objects and so on...
    -At server Level you can put the users into database or server Roles and map
    them to specific users on database level.

    HTH, Jens Suessmeyer.

    ---
    http://www.sqlserver2005.de
    ---
    "Rich" <Rich@discussions.microsoft.com> schrieb im Newsbeitrag 
    news:C1635985-AF0C-4A5F-A452-62FACB29EBFD@microsoft.com...
    > What is the differnce between managing Logins under the Security folder in
    > the EM and managing Logins from the User object in a database?  My 
    > developers
    > tend to navigate to the database, then to the Users, then to Login Name. 
    > If
    > the Login is not there, they must press new.
    >
    > I like to manage everything out of the Security/Logins.  I then end up
    > giving a login Database Access, then just make the login Permit in 
    > Database
    > Roles as the "Owner".  I like Roles because the have the permissions all
    > built in.  None of our logins need the granulartiy of Select or Delete
    > because everything is done by way of calling a stored procedure.  The code 
    > in
    > the stored procedure manages what they end up doing in the database.
    >
    > If you manage permissions within the database, it seems that you could 
    > OVER
    > restrict a login by not turning on enough permissions. 
    

  • Next message: Hoof Hearted: "Re: Restored Backup problem"

    Relevant Pages

    • Re: Application Role
      ... >database except through the application role. ... have created logins ... >then you need to remove permissions to access the ... >can be cut and pasted into Query Analyzer is appreciated. ...
      (microsoft.public.sqlserver.security)
    • Re: Logging in irrespective of database access
      ... Try connecting using Query Analyzer with one of the problem logins and run ... the following in the context of your demodata and accounts databases: ... This will return the security context used to access the database. ... SQL Server MVP ...
      (microsoft.public.sqlserver.server)
    • Re: Logging in irrespective of database access
      ... Try connecting using Query Analyzer with one of the problem logins and run ... the following in the context of your demodata and accounts databases: ... This will return the security context used to access the database. ... SQL Server MVP ...
      (microsoft.public.sqlserver.programming)
    • Re: Application Role
      ... One additional point--application roles are also members of the public ... database role, so they will have any permissions granted to public. ... >have created logins ...
      (microsoft.public.sqlserver.security)
    • Re: Changing security authentication type.
      ... i'm thinking that yes in time the sa account ... A new DBA Admin User login would only be useful for SQL Login purposes. ... if appropriate you can add users to the db_owner role in a database. ... Create one or more logins for the applications. ...
      (microsoft.public.sqlserver.security)