Re: Default access for a login

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 09/28/05


Date: Tue, 27 Sep 2005 16:28:01 -0600

Yes they can connect. In terms of what they can execute
where, that depends.
If a login isn't assigned a database, they will access
databases under the guest account. If guest is in the
database, they have access to the database and whatever
public permissions have been set as well as whatever has
been explicitly granted to the guest user in that database.
Guest always exists in master and tempdb - you can't delete
the account from those databases.

-Sue

On Tue, 27 Sep 2005 14:19:01 -0700, "Radu"
<Radu@discussions.microsoft.com> wrote:

>Hi guys,
>
>I create a new login; let's say "aaa" with authentication "SQL Server
>Authentication" and no database access specified.
>
>Now... I'm able to connect to my SQL Server 2000 using Query Analyzer with
>this "aaa" login and read data/execute stored procedure even I didn't specify
>any level access. For me looks strange, I was expecting to access a database
>after I define a user and permisions using this login. Is this normal?
>
>
>
>Thanks!



Relevant Pages

  • Re: SQL Default Login?
    ... A user needs a valid account (SQL Server login, ... the user can access only those database they ... have been explicitly granted access to plus those with the guest user. ...
    (microsoft.public.sqlserver.security)
  • Re: Guest account in SQL 2005?
    ... The guest account in SQL Server serves the same basic function as the ... just like you wouldn't grant permissions to the Everyone group in Windows. ... priviledges in the database. ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Default Login?
    ... Would it pose a security concern if the default login is ... I mean having a guest user is as good as allowing ... >they haven't been explicitly granted database access. ...
    (microsoft.public.sqlserver.security)
  • Re: How to remove `guest as Default Login ID in MSSQL2000?
    ... "guest" is not a login but is a database user. ... The guest user account allows a login without a user account to access a ... A login assumes the identity of the guest user when both of the ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Default Login?
    ... The guest database user provides logins with a security context when ... they haven't been explicitly granted database access. ... You can ignore the default login reported by xp_loginconfig. ... > Master Database. ...
    (microsoft.public.sqlserver.security)