Tuesday, March 20, 2012
Creating stripped accounts for accessing MS SQL Server
I tried to find an answer to my question but I wasn't able to find it on the Web. Maybe you guys could help me out.
I have an installation of MS SQL 2000. I made a new login on the database with only "select" permissions on a few views in one database. But when I use the account with a copy of SQL Server Manager, all databases on the instance of SQL Server are visible as well as the log files, DTS'es et cetera. Is there a way to 'strip' the account so only the views I want are visible and nothing more?
TIA,
Michiel
Leiden, The Netherlands.Unfortunately No. Enterprise Manager by default displays all databases,
though you don't have access to all of them.
--
HTH,
Vyas, MVP (SQL Server)
http://vyaskn.tripod.com/
What hardware is your SQL Server running on?
http://vyaskn.tripod.com/poll.htm
"MiKE" <anonymous@.discussions.microsoft.com> wrote in message
news:B9031289-38B7-49E7-8A2D-8FF180EE20C3@.microsoft.com...
Hi there,
I tried to find an answer to my question but I wasn't able to find it on the
Web. Maybe you guys could help me out.
I have an installation of MS SQL 2000. I made a new login on the database
with only "select" permissions on a few views in one database. But when I
use the account with a copy of SQL Server Manager, all databases on the
instance of SQL Server are visible as well as the log files, DTS'es et
cetera. Is there a way to 'strip' the account so only the views I want are
visible and nothing more?
TIA,
Michiel
Leiden, The Netherlands.|||>--Original Message--
>Unfortunately No. Enterprise Manager by default displays
all databases,
>though you don't have access to all of them.
And is there something to do to prevent the user to view
the DTSes that are on the server, or to prevent the user
from making new ones?
thanks again,
Michiel
Sunday, March 11, 2012
Creating security roles
Hello,
I have users with different roles accessing my system.
For eg, for database Adventure:
Role 1 - Can only read write data but not update
Role 2 - Can read, write and update
Role 3 - Can search data and run reports
Role 4 - Can backup, create users, replication, Run SSIS.
How do I create scripts for such users.
Regards,
Vidya.
Do it the easy way. Create the roles in the GUI and then hit the "Script" button at the top.And you may want to grant permissions to the schemas, so that new tables you add will have the right permissions.
Rob|||
Look up Server, Integration Services andDatabase Level roles in books online.
This should get you started:
Role 1 - Can only read write data but not update db_datareader
Role 2 - Can read, write and update db_datawriter and db_datareader
Role 3 - Can search data and run reports db_datareader, run reports is outside of T-SQL jurisdiction. Try the Reporting Services forum
Role 4 - Can backup - BACKUP DATABASE and BACKUP LOG permissions default to members of the sysadmin fixed server role and the db_owner and db_backupoperator fixed database roles.
create users, requires ALTER ANY USER rights, or db_owner
replication, Not sure, might be CONTROL SERVER server privilege or sysadmin,
Run SSIS db_dtsadmin, db_dtsltduser, and db_dtsoperator
|||thanks