Security - Owned Schemas

  • Hi All

    I'm trying to understand something regarding SQL Server security

    If I have a SQL Login and that Login is also a user on a database. What happens when that user owns schemas in the Database? What does that mean?

    Thanks

  • SQLSACT (8/7/2012)


    Hi All

    I'm trying to understand something regarding SQL Server security

    If I have a SQL Login and that Login is also a user on a database. What happens when that user owns schemas in the Database? What does that mean?

    Thanks

    It means they can create objects within that schema under that login, as well as access anything that the owner of the schema can with 'execute as owner' (the default if unspecified). So, if the schema owner were a DBO or had data_reader on dbo tables, anything created in that schema would inherit the rights.

    It gets complicated from there. :hehe:


    - Craig Farrell

    Never stop learning, even if it hurts. Ego bruises are practically mandatory as you learn unless you've never risked enough to make a mistake.

    For better assistance in answering your questions[/url] | Forum Netiquette
    For index/tuning help, follow these directions.[/url] |Tally Tables[/url]

    Twitter: @AnyWayDBA

  • Evil Kraig F (8/8/2012)


    SQLSACT (8/7/2012)


    Hi All

    I'm trying to understand something regarding SQL Server security

    If I have a SQL Login and that Login is also a user on a database. What happens when that user owns schemas in the Database? What does that mean?

    Thanks

    It means they can create objects within that schema under that login, as well as access anything that the owner of the schema can with 'execute as owner' (the default if unspecified). So, if the schema owner were a DBO or had data_reader on dbo tables, anything created in that schema would inherit the rights.

    It gets complicated from there. :hehe:

    Thanks

    I have a lot to learn about this

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply