RE: What commands can a user execute

Thanks. According to our IT group, he's a member of a couple groups which
I'm pretty sure doesn't have higher privledges. I'll double check on that.
Thanks.
-CqlBoy

"Linchi Shea" wrote:

learned from a security monitoring script which logs security events that a
member from this NT Group created and dropped a database. How ???

Maybe, he is a member of some other domain group that has the permission to
create database. Note that the owner of a database can always drop that
database.

Linchi

"Cqlboy" wrote:

I have user access SQL Server 2005 via a Windows NT Group which is not mapped
to any server roles but is a db_owner in almost all databases. I just
learned from a security monitoring script which logs security events that a
member from this NT Group created and dropped a database. How ???
Inspecting sp_srvrolepermission
and sp_dbfixedrolepermission I find that only the dbcreation server role has
the permission to create/drop a database which, again, my NT Group is not
mapped to.
How do I determine an NT Groups permissions and more importantly, which
commands they can execute ? Thanks. -CqlBoy

fn_my_permissions(NULL, 'Database')
sp_srvrolepermission
sp_dbfixedrolepermission

select sl.*
from master.sys.syslogins sl
left join sys.database_role_members rm on
user_name(rm.member_principal_id) = sl.loginname
.

Relevant Pages

  • Re: HOME BASED JOB OPPORTUNITY - MAKE MILLIONS WITH Rs.60!
    ... Free entry into draw. ... > THIS CAN REALLY MAKE YOU EASY MONEY! ... Try to Remember that you don`t change the Main Database ... > mail/courier with money to the main member and to the other 5 upline ...
    (soc.culture.indian.gujarati)
  • Re: HOME BASED JOB OPPORTUNITY - MAKE MILLIONS WITH Rs.60!
    ... Free entry into draw. ... > THIS CAN REALLY MAKE YOU EASY MONEY! ... Try to Remember that you don`t change the Main Database ... > mail/courier with money to the main member and to the other 5 upline ...
    (soc.culture.indian.karnataka)
  • Re: HOME BASED JOB OPPORTUNITY - MAKE MILLIONS WITH Rs.60!
    ... Free entry into draw. ... > THIS CAN REALLY MAKE YOU EASY MONEY! ... Try to Remember that you don`t change the Main Database ... > mail/courier with money to the main member and to the other 5 upline ...
    (soc.culture.indian.karnataka)
  • Re: Handling addresses
    ... am seeking guidance regarding handling member addresses. ... asked to learn how to make the database relational and make it more usable. ... I have junction tables to match the customer names with the addresses, ... CustomerNames with a Subform based on tblJunctionAddress - or a query joining ...
    (microsoft.public.access.tablesdbdesign)
  • Re: Newbie Database ER model question
    ... which is one of the goals of relational database structures.) ... How do you plan to store posts when the same member posts ... who will ensure that all messages posted to the forum are appropriate. ...
    (comp.databases.ms-access)