Re: Disable database diagram creation

User is not db_owner and not in sysadmin,
there are no permissions to public database role,
but he is still able to create diagrams.

I want to get "You do not have sufficient privileges to create the new
diagram." message,
when user trying to creaate diagram.

Sue Hoegemeier wrote:
To create a diagram, they would need to be the database
owner or a member of the db_owner role (or a sysadmin).
Don't add them to those roles.
You can figure out the specific object permissions in the
following article - different issue than yours but it lists
the permissions.
http://support.microsoft.com/?id=327145

-Sue

.

Relevant Pages

  • Re: Disable database diagram creation
    ... Check the permissions on the objects listed in the article. ... there are no permissions to public database role, ... when user trying to creaate diagram. ... following article - different issue than yours but it lists ...
    (microsoft.public.sqlserver.security)
  • Re: Viewing database diagrams
    ... For just viewing diagrams, grant execute permissions on ... The user is in the public role, ... He cannot view an existing database diagram. ...
    (microsoft.public.sqlserver.programming)
  • Re: Are there any diagrams on security / permissions?
    ... Is there a good diagram that visually shows the relations between the ... Server Logins, Database Users and all the possible permissions etc., ...
    (microsoft.public.sqlserver.security)
  • Re: db_denydatawriter
    ... perhaps this also gives read write access on the database to this user? ... Resrictive permissions overrides in its own level. ... However, if she has sysadmin right, then she'll be able to modify that data. ... Is it possible she has some admin rights which override DenyWriter (though ...
    (microsoft.public.sqlserver.security)
  • Re: /proc filesystem allows bypassing directory permissions on Linux
    ... described that the sysadmin checked for that, ... hard link after the sysadmin checked, but before the permissions were ... I don't think what Pavel described is a very serious hole, ... mishandle the initial protections on the file ...
    (Bugtraq)