Re: Permissions not enforced

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 06/28/05

  • Next message: Marlon Brown: "Re: How to keep SQL-DMZ and SQL-Internal in sync ?" 
    Date: Tue, 28 Jun 2005 06:26:04 -0600

    You can query master..sysprocesses to see how the user is
    connecting, what login is used. If the user is connecting
    using Windows authentication then the user is likely
    inheriting permissions through membership in a group.

    -Sue

    On Tue, 28 Jun 2005 01:30:02 -0700, Hoof Hearted
    <HoofHearted@discussions.microsoft.com> wrote:

    >I have a pc set up with a System DSN to access my Sql Server. It is set up to
    >use NT Authentication according to the Login Name.
    >
    >I have discovered that the User has full permissions to Select, Insert,
    >Update and delete records in any table. In Enterprise Manager this User is
    >configured to have just Select permissions on a few tables. Some of my tables
    >are set up with Update and Delete permissions revoked for all Users and
    >Roles. So it appears to me that the DSN is not using NT Authentication and
    >that the User is being authenticated with sa permissions.
    >
    >Where am I going wrong?

  • Next message: Marlon Brown: "Re: How to keep SQL-DMZ and SQL-Internal in sync ?"

    Relevant Pages

    • Re: Windows Server 2003 Auto connect printers;
      ... I removed the NT Authentication but then the user's don't have enough ... then for a normal basic user to login to a TS without having NT ... Isn't some form of admin rights required for a non admin user ... >> You do this by granting only those permissions that are ...
      (microsoft.public.win2000.termserv.apps)
    • Re: Security question ..
      ... > If you use NT authentication, a user's permissions to a database are ... Your assertion that a user's permissions are independent of the application ... Even using Access and "exploring" will require an ODBC login to SQL Server. ...
      (microsoft.public.sqlserver.server)
    • Re: unable to login as oracle user
      ... As I have been looking through log files, this is the only thing "weird" I have found. ... Feb 2 08:22:14 orarac1 login: PAM unable to dlopen ... PAM is the authentication system that comes with all Linux these days. ... The file is there, with permissions 755 root:root. ...
      (RedHat)
    • RE: default for requiring authentication 2003
      ... Windows 2000 and earlier would allow access as I described and I ... default for requiring authentication 2003 ... resources that have permissions for Everyone unless you enable this setting. ... same username and password as a user on the domain or on the local server. ...
      (Focus-Microsoft)
    • Re: Authentication from Active Directory and Database based user d
      ... with this (I'm not too clear on the permissions to see a page or actual ... You mentioned earlier in the thread that you've used formas authentication ... you don't need separate ... I'm writing a web system ...
      (microsoft.public.dotnet.framework.aspnet.security)