Re: Permission issue?

It looks like it was the 'guest' user account that you mentioned and appears
to not show any of the other databases anymore.

Though it's strange that the none of the other unassigned databases are no
longer listed in the view in Query Analyzer logged in with the test SQL
Login which is how it should be now, but when I go into Enterprise Manager
as the administrator the 'guest' user name is still listed in some of them
and when I try to delete it I get 'Microsoft SQL-DMO (ODBC SQLState:
42000)' - 'Error 15008: User 'guest' does not exist in the current
database.'. The main thing seems to be working correctly but kind of
wondering why it's still listed.

Thanks a bunch again RLF. Much appreciated as always.

"Russell Fields" <russellfields@xxxxxxxxxx> wrote in message
news:uV4FLFJrIHA.3420@xxxxxxxxxxxxxxxxxxxxxxx
zz12,

A couple of possibilities:

1. If a database has the guest user enabled, anybody on the server can get
into that database with whatever rights the guest user has.

2. If the test user is a Windows User in a Windows Group and that group
has rights in the other databases, your test user will inherit rights that
you might not have realized had been granted.

RLF

"zz12" <IDontLikeSpam@xxxxxxxxxxx> wrote in message
news:%238%23m%23AIrIHA.524@xxxxxxxxxxxxxxxxxxxxxxx
Hello, I have assigned a test user to a user role for a particular user
created database in SQL Server 2000 but when I go to connect with Query
Analyzer I notice this test user can see a couple of other user created
databases which I didn't assign permissions to view. Is this a bug or
something I'm overlooking?

Thanks in advance.





.

Relevant Pages

  • Re: How can I remove Public access to SQL Express dbs?
    ... Guest has no CONNECT permission in user databases by default. ... You can't delete guest but can render it unusable by revoking CONNECT permission in databases other than master and tempdb. ... it will remove the public access of the database in question. ...
    (microsoft.public.sqlserver.security)
  • Re: How can I remove Public access to SQL Express dbs?
    ... You can't delete guest but can render it unusable by revoking ... CONNECT permission in databases other than master and tempdb. ... it will remove the public access of the database in question. ...
    (microsoft.public.sqlserver.security)
  • Re: select from one db only
    ... Those databases are available to anyone who can login to the server because ... You should never remove guest from master ...
    (microsoft.public.sqlserver.security)
  • Re: Guest Account
    ... > The guest accout is a way for people to access a database - NOT the sever. ... > There is no login that is directly associated with guest... ... > As for the guest account in Northwind/Pubs - yes, ... > databases are sample databases - for learning. ...
    (microsoft.public.sqlserver.security)
  • Re: PUBLIC Role - What am I missing?
    ... In the master database there is a guest ... user - guest is a member of public and therefore has all rights directly ... They can see the names of the databases and the ...
    (microsoft.public.sqlserver.security)