Re: SQL User permissions
- From: Erland Sommarskog <esquel@xxxxxxxxxxxxx>
- Date: Sat, 24 Feb 2007 16:02:23 +0000 (UTC)
ace95hockey (ace95hockey@xxxxxxxxxxxxxx) writes:
I am sorry about being unclear. I have not done this already. I am
trying to determine if I can setup a user that when they log into SQL
Server Management Studio that they only see their database and nothing
else. I have done as you have said below and gone to the database and
given this account dbo permissions for this database. They are not a
member of any of the builtin security roles and I have not created any
new ones. When I log in as this user using Management Studio they can
see all databases and permissions, etc. I only want them to be able to
see their database and only make changes to their database. I don't
know if that even can be done but that is my goal.
You can do this:
DENY VIEW ANY DATABASE TO someuser
Then the users will only be able to see master and tempdb, and any
database they are the owner of. I have not been able to find out whether
you can grant/deny VIEW DEFINITION of a single database. Say that someuser
has been granted access to the database db765, but is not the owner of
the database. When someuser logs in, db765 does not appear in Mgmt Studio.
Someuser can say "USE db765" in a query window and access the database
that way, but it can cause some confusion.
--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx
Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
.
- References:
- Re: SQL User permissions
- From: Uri Dimant
- Re: SQL User permissions
- From: Qi Ding [MSFT]
- Re: SQL User permissions
- From: ace95hockey
- Re: SQL User permissions
- Prev by Date: Re: Backup
- Next by Date: Re: Execute permission denied on object xp_SQLagent_notify
- Previous by thread: Re: SQL User permissions
- Next by thread: C2 SQL auditing
- Index(es):
Relevant Pages
|
