Re: Windows Power User SQL

Hi Uri or Erland

When I run from the master database for example testing against user bill

execute as user= 'domain\bill.dobbs'

SELECT SUSER_NAME(), USER_NAME();
results = domain\bill.dobbs' , guest

Bill has not been given any access to the master database, but as guest is
enabled there it seems anyone can run queries on the master database through
the account guest. I tried revoking access to the guest account to master
without any success. Is there any way to prevent users accessing the master
database through the guest account.

thanks
for any help

Sammy

"Uri Dimant" wrote:

Sammy
SELECT HAS_DBACCESS ( 'database_name' )


In SQL Server 2005, you can use the Has_Perms_By_Name() function
(http://msdn2.microsoft.com/en-us/library/ms189802.aspx).

For example, I would like to list all stored procedures which a role has
execute permission for.

This is an example of usage:

SELECT o.SchemaAndName,
has_perms_by_name(o.SchemaAndName, 'OBJECT', 'EXECUTE')
FROM (SELECT name, SCHEMA_NAME(schema_id) AS [schema],
SCHEMA_NAME(schema_id)+'.'+name AS SchemaAndName
FROM sys.objects
WHERE type = 'P') AS o


"Sammy" <Sammy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:538F09E5-C03D-4E8B-BBA4-DAC3F29DD6D0@xxxxxxxxxxxxxxxx
Hi,

On one of our Sql 2005 servers someone added a user to a server as a
windows
power user with permission to log onto the server and have given them
permission to just read and write on one database.

They have been able to backup a database and view the list of tables on a
linked server.

How can I find out the whole list of permissions the user has on the sql
server as checking the actual permissions they only have read and write
permissions on one database and are not a member of any server roles.

Very confused any suggestions please let me know

Sammy



.

Relevant Pages

  • Re: dumb++ security
    ... If the user doesn't have permission ... > to connect to either database, ... Proud Member of the Exclusive "I have been plonked by Davee because he ... > database/some server to perform task A. ...
    (comp.security.misc)
  • Re: dumb++ security
    ... If the user doesn't have permission ... > to connect to either database, ... Proud Member of the Exclusive "I have been plonked by Davee because he ... > database/some server to perform task A. ...
    (comp.security.unix)
  • Re: WSS 3.0 Search Service
    ... was trying to access the database server to create the search database, ... I changed it to SQL server authentication and it was able ... I keep getting redirected back to the configuration page. ... The application-specific permission settings do not grant Local ...
    (microsoft.public.sharepoint.windowsservices)
  • RE: user permissions
    ... Server 2003): ... permission in both the Sharing permission and Security permission. ... since abc can logon to the server and access the ... database locally, it seems that it has enough security permission. ...
    (microsoft.public.sqlserver.server)
  • Re: dumb++ security
    ... If the user doesn't have permission ... > to connect to either database, ... > database/some server to perform task A. ...
    (comp.security.unix)