Re: user account creation

From: robert (robert.vegas_at_rogers.com)
Date: 09/19/05


Date: Sun, 18 Sep 2005 22:04:51 -0400

Thanx Sue,

"Sue Hoegemeier" <Sue_H@nomail.please> wrote in message
news:t5ehi1la4ffhkponbl9a3tqtv0f7o0l25t@4ax.com...
> In SQL Server 2000, if users are accessing SQL Server with
> Enterprise Manager, they can view the logins (but can modify
> without the appropriate permissions). They can also view all
> databases but can only access those they have permissions to
> access. That is the way it works in SQL Server 2000.
>
> -Sue
>
> On Wed, 14 Sep 2005 15:18:25 -0400, <rvegas@rogers.com>
> wrote:
>
>>I think i figured out what the problem is, but still dont know how to
>>prevent it.
>>All the databases have dbo=db_owner that has full permissions on the
>>database. So they can give access to their database to anyother user. Is
>>there a way to prevent users from seeing other users?
>>Thanx
>><rvegas@rogers.com> wrote in message
>>news:%23a3epPUuFHA.3528@TK2MSFTNGP15.phx.gbl...
>>> Hi,
>>> I have an sql 2000 server with 150 databases setup. Users use enterprise
>>> manager to connect to the server. Heres where the problem arises, once
>>> they connect they can see all the databases.
>>> Also if i logon as a regular db owner. I can select create new user,
>>> select an existing user and make him an owner of my database.
>>> This doesn't seem right, can anyone help me fix this. Or point me in the
>>> right direction.
>>> Thank you
>>>
>>>
>>
>



Relevant Pages

  • ADP, Application Role, and objects
    ... The above link is to an atricle on how to implement SQL Server Application ... After you connect with your ADP, fire a bit of code to set the ... third party tools to view the data on the same database. ... Scenario 1 - If I explicitly grant permissions on that object to the user ...
    (microsoft.public.access.adp.sqlserver)
  • Re: Execute Persmission denied on object sp_OACreate
    ... > SQL Server is creating a job behind the scenes. ... > permissions. ... > SA account password and gaining access to the database. ... >>> How can get a user permissions to execute these stored procedures ...
    (microsoft.public.sqlserver.security)
  • Re: Newbie: I dont understand user permissions for table access
    ... > My database is remote to my workstation. ... > tables/fields WITHOUT specifying anything in the permissions dialogs? ... >> HOW are you connecting to SQL Server? ... what rights/permissions have been granted to the PUBLIC role? ...
    (microsoft.public.sqlserver.server)
  • Re: Execute Persmission denied on object sp_OACreate
    ... SQL Server is creating a job behind the scenes. ... SA account password and gaining access to the database. ... > SQL Server doesn't check permissions on indirectly referenced objects as ... > the proxy account security context for non-sysadmin users from Enterprise ...
    (microsoft.public.sqlserver.security)
  • Re: Security question ..
    ... What I want to prevent is any access to the database accept through our ... application unless you have elevated permissions. ... Authentication, if he is smart enough to create an NT Auth ODBC connection ... passes through to the database or to use SQL Server authentication. ...
    (microsoft.public.sqlserver.server)