Showing posts with label accessing. Show all posts
Showing posts with label accessing. Show all posts

Tuesday, March 20, 2012

Creating stripped accounts for accessing MS SQL Server

Hi there,
I tried to find an answer to my question but I wasn't able to find it on the Web. Maybe you guys could help me out.
I have an installation of MS SQL 2000. I made a new login on the database with only "select" permissions on a few views in one database. But when I use the account with a copy of SQL Server Manager, all databases on the instance of SQL Server are visible as well as the log files, DTS'es et cetera. Is there a way to 'strip' the account so only the views I want are visible and nothing more?
TIA,
Michiel
Leiden, The Netherlands.Unfortunately No. Enterprise Manager by default displays all databases,
though you don't have access to all of them.
--
HTH,
Vyas, MVP (SQL Server)
http://vyaskn.tripod.com/
What hardware is your SQL Server running on?
http://vyaskn.tripod.com/poll.htm
"MiKE" <anonymous@.discussions.microsoft.com> wrote in message
news:B9031289-38B7-49E7-8A2D-8FF180EE20C3@.microsoft.com...
Hi there,
I tried to find an answer to my question but I wasn't able to find it on the
Web. Maybe you guys could help me out.
I have an installation of MS SQL 2000. I made a new login on the database
with only "select" permissions on a few views in one database. But when I
use the account with a copy of SQL Server Manager, all databases on the
instance of SQL Server are visible as well as the log files, DTS'es et
cetera. Is there a way to 'strip' the account so only the views I want are
visible and nothing more?
TIA,
Michiel
Leiden, The Netherlands.|||>--Original Message--
>Unfortunately No. Enterprise Manager by default displays
all databases,
>though you don't have access to all of them.
And is there something to do to prevent the user to view
the DTSes that are on the server, or to prevent the user
from making new ones?
thanks again,
Michiel

Sunday, March 11, 2012

Creating security roles

Hello,

I have users with different roles accessing my system.

For eg, for database Adventure:

Role 1 - Can only read write data but not update

Role 2 - Can read, write and update

Role 3 - Can search data and run reports

Role 4 - Can backup, create users, replication, Run SSIS.

How do I create scripts for such users.

Regards,

Vidya.

Do it the easy way. Create the roles in the GUI and then hit the "Script" button at the top.

And you may want to grant permissions to the schemas, so that new tables you add will have the right permissions.

Rob|||

Look up Server, Integration Services andDatabase Level roles in books online.

This should get you started:

Role 1 - Can only read write data but not update db_datareader

Role 2 - Can read, write and update db_datawriter and db_datareader

Role 3 - Can search data and run reports db_datareader, run reports is outside of T-SQL jurisdiction. Try the Reporting Services forum

Role 4 - Can backup - BACKUP DATABASE and BACKUP LOG permissions default to members of the sysadmin fixed server role and the db_owner and db_backupoperator fixed database roles.

create users, requires ALTER ANY USER rights, or db_owner

replication, Not sure, might be CONTROL SERVER server privilege or sysadmin,

Run SSIS db_dtsadmin, db_dtsltduser, and db_dtsoperator

|||thanks