August 2, 2004 at 2:59 pm
Comments posted to this topic are about the content posted at http://www.sqlservercentral.com/columnists/
January 13, 2005 at 9:36 am
Helow! The article is very good and clear, but i need... how i can to do this with commands T-SQL...?? Help me!! thank you!!
August 3, 2007 at 11:18 am
Always good to review the basics. I noticed that the .\ usage in figure 7 was no different than if I click the ... button without it. Am I missing something?
I learned something about security recently that surprised me. The situation is like this. I have a member who is part of a server group. That group has permissions to a database. The specified user cannot connect directly to the database using Query Analyzer. I was a bit surprised, shows an advantage to SQL logins as opposed to Windows login. It's also possible that I didn't do a valid attempt and my result is meaningless.
Also recently I found a use for Deny. I have a reporting database where we want to strictly limit user's access to data. All of these users are in a server group. The ERP system has a set of views provided by the vendor. So we created a second database, created a 'select * from livedb..' set of queries by the same name as the vendor queries and gave the group select permissions to said views.
In the production DB, we denied them select on sysobjects and no select permissions on the vendor views. Apparently by denying the select on sysobjects, you also keep them from running sp_helptext on the views, so they can't see what the code is behind the vendor views.
-----
[font="Arial"]Knowledge is of two kinds. We know a subject ourselves or we know where we can find information upon it. --Samuel Johnson[/font]
February 4, 2010 at 7:44 pm
Steve, excellent post on logins/users! Do you have an updated 2005/2008 version of this? Any help would be greatly appreciated. Thanks!
Sharma
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply