Re: Security to document databases



The default public permissions should provide the needed permissions in SQL
2000 to view schema. You shouldn't need to add the user to db_deny* roles
unless you've granted permissions on user objects to public (which is a bad
idea, IMHO). Also, consider using Query Analyzer instead of EM for this
task.

BTW, there are many third party tools that can help automate database
documentation.

--
Hope this helps.

Dan Guzman
SQL Server MVP

"Brandon Lilly" <avarice@xxxxxxxxxxxxxxxxx> wrote in message
news:183E8C33-176D-43F8-8FD9-9970FF055C39@xxxxxxxxxxxxxxxx
What are the minimum rights (in SQL 2000) to allow a user to be able to
view
the schema on all database objects on a server, but not allow them to
view/modify any data or execute anything? I tried just adding the user to
all databases and then setting the deny read/write db role, but this
affected
their ability to get a list of database objects in enterprise manager.

Is there a process that someone could point me to that would help for
this.
I am trying to avoid having to set the security on several thousand
database
objects.

Cheers!

Brandon


.



Relevant Pages

  • Re: Need help on how to organize users and objects
    ... create and execute procedures and such ... tables they need and I grant them select permissions to them. ... so I think that the best way will be to create Schema to Role and then you ... and then create an appropriate permissons for those roles in database ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Adapter -Stored Procedure Permissions- issue, -SQL 2005-
    ... Permissions were granted on the table, ... 'Security Users' of the database, then we add that user to a 'Roles ... SQL Adapter schema generation wizard and when the schema is created ...
    (microsoft.public.biztalk.general)
  • Re: Creating schema in oracle10g express edition
    ... In oracle if i've 50 schemas have 50 users.. ... oracle have the concept of one database, where i can create a user (and ... than a schema) as container of my database objects (tables, ...
    (comp.databases.oracle.server)
  • Re: Setting up Authorizations for on-Form data entry: Advice requ
    ... Yes I was talking about logging onto the database. ... permissions for all existing database objects and ones that will be created ... Newly created users are automatically added to the Users group (which ... database file can edit or delete database objects, ...
    (microsoft.public.access.formscoding)
  • Re: Setting up Authorizations for on-Form data entry: Advice requ
    ... Yes I was talking about logging onto the database. ... permissions for all existing database objects and ones that will be created ... Newly created users are automatically added to the Users group (which ... database file can edit or delete database objects, ...
    (microsoft.public.access.formscoding)