Re: Permission issue?

zz12,

A couple of possibilities:

1. If a database has the guest user enabled, anybody on the server can get
into that database with whatever rights the guest user has.

2. If the test user is a Windows User in a Windows Group and that group has
rights in the other databases, your test user will inherit rights that you
might not have realized had been granted.

RLF

"zz12" <IDontLikeSpam@xxxxxxxxxxx> wrote in message
news:%238%23m%23AIrIHA.524@xxxxxxxxxxxxxxxxxxxxxxx
Hello, I have assigned a test user to a user role for a particular user
created database in SQL Server 2000 but when I go to connect with Query
Analyzer I notice this test user can see a couple of other user created
databases which I didn't assign permissions to view. Is this a bug or
something I'm overlooking?

Thanks in advance.



.

Relevant Pages

  • Re: 1 user gets when "admin" in use - but no login/password prompt
    ... I hadn't thought of checking their user rights, ... ACCESS Secure Database with permissions... ... My Server Administrator... ... network operating system, what desktop operating systems? ...
    (microsoft.public.access.security)
  • Re: Error code = 4060
    ... divisional portals are running under a different app pool and identity than ... the corporate portal, and the identity of this pool, while having dbo rights ... portal's content database. ...
    (microsoft.public.sharepoint.portalserver.development)
  • Re: db_denydatawriter
    ... perhaps this also gives read write access on the database to this user? ... Resrictive permissions overrides in its own level. ... However, if she has sysadmin right, then she'll be able to modify that data. ... Is it possible she has some admin rights which override DenyWriter (though ...
    (microsoft.public.sqlserver.security)
  • Re: Complete Neophyte Question(s)
    ... No you cannot remove a login from the 'public' role. ... For rights to _use_ objects then the appropriate rights need to be granted ... GRANT SELECT ON dbo.Orders TO OrderViewers ... for a database that is supposed to be secured it is a bad idea ...
    (microsoft.public.sqlserver.security)
  • Re: SUUNTO Vyper PC i/f
    ... username and password. ... to enter the database password. ... I gained access to the data in Suunto v2 using it - but it will NOT allow ... have the rights to the program the DATA is MINE!! ...
    (uk.rec.scuba)