Re: Disable database diagram creation

User is not db_owner and not in sysadmin,
there are no permissions to public database role,
but he is still able to create diagrams.

I want to get "You do not have sufficient privileges to create the new
diagram." message,
when user trying to creaate diagram.

Sue Hoegemeier wrote:
To create a diagram, they would need to be the database
owner or a member of the db_owner role (or a sysadmin).
Don't add them to those roles.
You can figure out the specific object permissions in the
following article - different issue than yours but it lists
the permissions.
http://support.microsoft.com/?id=327145

-Sue

.

Relevant Pages

  • Re: Disable database diagram creation
    ... Check the permissions on the objects listed in the article. ... there are no permissions to public database role, ... when user trying to creaate diagram. ... following article - different issue than yours but it lists ...
    (microsoft.public.sqlserver.security)
  • Re: Viewing database diagrams
    ... For just viewing diagrams, grant execute permissions on ... The user is in the public role, ... He cannot view an existing database diagram. ...
    (microsoft.public.sqlserver.programming)
  • Re: Are there any diagrams on security / permissions?
    ... Is there a good diagram that visually shows the relations between the ... Server Logins, Database Users and all the possible permissions etc., ...
    (microsoft.public.sqlserver.security)
  • Re: db_denydatawriter
    ... perhaps this also gives read write access on the database to this user? ... Resrictive permissions overrides in its own level. ... However, if she has sysadmin right, then she'll be able to modify that data. ... Is it possible she has some admin rights which override DenyWriter (though ...
    (microsoft.public.sqlserver.security)
  • Re: permissions required for executing CDOSys stored procedures
    ... he is by default member of the sysadmin server ... role on the SQL Server database unless steps are taken to prevent that. ... sysadmin and who has not been granted specific execute permissions on the ... it is possible to GRANT EXECUTE ON sp_OACreate TO ...
    (microsoft.public.sqlserver.security)