Re: Table security

From: David J. Cartwright (davidcartwright_at_hotmail.com)
Date: 09/28/05


Date: Wed, 28 Sep 2005 15:27:44 -0400

Why make him a user in the other Databases at all ? is guest still enabled ?
Get rid of guest (Default perms)
Create a view with the data you want user to see
give select permission on view

"Radu" <Radu@discussions.microsoft.com> wrote in message
news:6209605F-6B12-4B44-ACF2-B6C4C133A613@microsoft.com...
> Hi guys,
>
> I have a SQL Server 2000 with about 20 databases, each database with few
> hundreds of objects (tables, sps, views etc).
>
> I have a new user (application) who should read data from few columns (not
> all), from only one database, only one table. The rest of 19 databases are
> completely denied. I've created a login for this user and his roles for
> all
> 19 databases are db_denydatareader & db_denydatawrite.
>
> How should I proceed with the last database? Do I need to go on each
> object
> (few hundreds objects) from this database and deny "SELECT", "UPDATE",
> "INSERT" operations, leaving access on only one table? Is there any
> ability
> to put db_denydatareader & db_denydatawrite, excepting table X, allowing
> read-only access on few columns?
>
> Thanks,
> Radu



Relevant Pages

  • Re: How can I remove Public access to SQL Express dbs?
    ... Guest has no CONNECT permission in user databases by default. ... You can't delete guest but can render it unusable by revoking CONNECT permission in databases other than master and tempdb. ... it will remove the public access of the database in question. ...
    (microsoft.public.sqlserver.security)
  • Re: How can I remove Public access to SQL Express dbs?
    ... You can't delete guest but can render it unusable by revoking ... CONNECT permission in databases other than master and tempdb. ... it will remove the public access of the database in question. ...
    (microsoft.public.sqlserver.security)
  • Re: select from one db only
    ... Those databases are available to anyone who can login to the server because ... You should never remove guest from master ...
    (microsoft.public.sqlserver.security)
  • Re: Guest Account
    ... > The guest accout is a way for people to access a database - NOT the sever. ... > There is no login that is directly associated with guest... ... > As for the guest account in Northwind/Pubs - yes, ... > databases are sample databases - for learning. ...
    (microsoft.public.sqlserver.security)
  • Re: system databases
    ... Do not remove Guest user from Master and Tempdb databases; ... >separate disk array for os,data, transaction files and backups. ... is it true that the system databases require the guest account? ...
    (microsoft.public.sqlserver.setup)