Re: permissions not working
- From: "Dan Guzman" <guzmanda@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 18 Feb 2008 15:19:13 -0600
That makes sense. I have put in a call to the Network admin who set
up these accounts to discuss. Thanks so much for your help!
Erland is the one who deserves your thanks since he is the one who suggested the SELECT USER for troubleshooting.
--
Dan Guzman
SQL Server MVP
http://weblogs.sqlteam.com/dang/
"JEM" <Jenn@xxxxxxxxxxxxxxxxx> wrote in message news:2617759f-77d5-4d72-9d03-efb3c0ab3697@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Feb 18, 11:52 am, "Dan Guzman" <guzma...@nospam-
online.sbcglobal.net> wrote:
> Thanks for the help! When I do SELECT USER it does give me dbo. I am
> not an expert with networking or with SQL server. Does this mean that
> at the windows NT level they have sysadmin rights because I did not
> give them these rights on the database?
It is likely that the user in question is a member of the Windows
Administrators group on the SQL Server. Administrators group members access
the SQL Server via membership of the BUILTIN\Administrators login are
sysadmin role members by default in SQL 2000. Sysadmin role members are dbo
in all databases and is why Erland suggested you check SELECT USER.
--
Hope this helps.
Dan Guzman
SQL Server MVPhttp://weblogs.sqlteam.com/dang/
"JEM" <J...@xxxxxxxxxxxxxxxxx> wrote in message
news:29eaeae8-dfd3-4ecf-8d8e-3122fb34914b@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Feb 15, 6:21 pm, Erland Sommarskog <esq...@xxxxxxxxxxxxx> wrote:
> JEM (J...@xxxxxxxxxxxxxxxxx) writes:
> > Hi. I have a SQL Server 2000 database,using Windows Authentication,
> > and have created some new roles and assigned permissions to the
> > various tables, views and sprocs. However, the permissions are not
> > working. When I log on as a user in one of the roles, i still have
> > access to insert, update, delete records in tables that i have
> > specifically denied permissions on (they should only have select
> > permissions which they have). I am able to log onto Query Analyzer
> > and do everything with the table that i should not be able to do. The
> > user is only a member of public and this role. The objects are all
> > owned by dbo. Any ideas?
> If you say "SELECT USER" what does it say? The name of this user or
> does it by chance say "dbo"? In the latter case your login somehow
> is a sysadmin member and is of course able to do anything.
> --
> Erland Sommarskog, SQL Server MVP, esq...@xxxxxxxxxxxxx
> Books Online for SQL Server 2005
> athttp://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books...
> Books Online for SQL Server 2000
> athttp://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
Thanks for the help! When I do SELECT USER it does give me dbo. I am
not an expert with networking or with SQL server. Does this mean that
at the windows NT level they have sysadmin rights because I did not
give them these rights on the database?- Hide quoted text -
- Show quoted text -
That makes sense. I have put in a call to the Network admin who set
up these accounts to discuss. Thanks so much for your help!
.
- References:
- permissions not working
- From: JEM
- Re: permissions not working
- From: Erland Sommarskog
- Re: permissions not working
- From: JEM
- Re: permissions not working
- From: Dan Guzman
- Re: permissions not working
- From: JEM
- permissions not working
- Prev by Date: Re: permissions not working
- Next by Date: encrypted value storage
- Previous by thread: Re: permissions not working
- Next by thread: Re: Integrated Security in the DMZ
- Index(es):
Relevant Pages
|
|
