Visual Studio gives direct dbo access to Sql Server 2000 ???
From: BBFrost (barry.b.frost_at_remove_this.wrd.state.or.us)
Date: 07/19/05
- Previous message: Jasper Smith: "Re: sa User is disabled"
- Next in thread: BBFrost: "Re: Visual Studio gives direct dbo access to Sql Server 2000 ??? <<Update>>"
- Reply: BBFrost: "Re: Visual Studio gives direct dbo access to Sql Server 2000 ??? <<Update>>"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 18 Jul 2005 15:39:28 -0700
Greetings,
I'm a new Sql Server administrator and I just received a shock ... We've
set up a pretty much default instance of Win2003 server and SqlServer 2000.
Just told the developers that I'd set up a test Sql Server instance and told
them the name. Shortly there after I found that they were connecting from
Visual Studio are getting automatic 'dbo' access.
Tables and views are popping up all over the place, all owned by dbo and I'm
having a tough time figuring out what's going on.
I've set the Sql Server 2000 Security parameters to "Sql Security & Windows"
and I've created individual user accounts for our test database. (The
security options I see are "SQL Server and Windows" & "Windows Only".
Selecting "SQL Server and Windows" doesn't seem to limit the developers from
charging in with "Window Only" access.
For example "smithca" has a Windows NT Domain account and Visual Studio.
Within the test_db_server database I've created a "smithca" user account.
With the test_db "smithca" has been granted the "public" roll.
When "smithca" fires up Visual Studio Server Explorer, points at
"test_db_server" and creates a "Window NT integrated security" account.
WHAM! He's got "dbo" access to the database.
>From what I can see any developer can log into any database (test or
production) with full DBA permissions.
Afraid ... very afraid !!!
Any help with this would be greatly appreciated !!!
Thanks in advance
Barry
in Oregon
- Previous message: Jasper Smith: "Re: sa User is disabled"
- Next in thread: BBFrost: "Re: Visual Studio gives direct dbo access to Sql Server 2000 ??? <<Update>>"
- Reply: BBFrost: "Re: Visual Studio gives direct dbo access to Sql Server 2000 ??? <<Update>>"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|