Domain group permission error

  • Hi DBAs,

    I have a group of users who access my database through windows authentication if they are members of a specific group.  The users typically access the data they need in one of two ways, either thru a database query in Excel or by opening a UDL file in Excel. 

    This works for most folks, however out of the group of approximately 25-30, I have two users who can only see 4 tables (and strange ones at that).  Has anyone run into an issue like this?  BTW, the group has public access.

    Thanks for your help.

    Robin

  • what do you mean by "and strange ones at that"?

    are they tables in that database?  in another database?  on another server?  when the users are connected does sp_who2 show them as users of the actual database in quetion?

     


    Cheers,
    - Mark

  • Strange because they see 1 user tables, 2 views  and two sys table.  As if permission was specifically given on those objects. I am not sure about sp_who, but I will check.  The public role actually only has permission to systables, but that seems to be sufficient to let the majority of users in. 

    Thanks for your help.

    Robin

  • Can I assume that none of these users is a member of any server role and that their access is via membership in the public database role?  You may want to check if the 2 odd users are members of any other database role.  By the way were the NT ids put in a group and then that group given access to the public database role or all all individual NT ids part of some SQL Server role?  You may want to explore a bit in Enterprise Manager and see who has access to what.  perhaps these 2 odd ids are members of some other group that has different SQL permissions.

    Francis

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply