October 26, 2023 at 1:38 pm
assume this DB user (UserA) has no sql server login, not in any domain group that has a login.
UserA is a windows user (user type) for Database A. UserA has only CONNECT permission to Database A.
Can UserA without a login access any objects in Database A? if so, how?
October 26, 2023 at 2:13 pm
I would think so. If any objects have permissions set to "public", for example, I would think UserA could access them.
And naturally for contained dbs permissions would not require a login.
SQL DBA,SQL Server MVP(07, 08, 09) "It's a dog-eat-dog world, and I'm wearing Milk-Bone underwear." "Norm", on "Cheers". Also from "Cheers", from "Carla": "You need to know 3 things about Tortelli men: Tortelli men draw women like flies; Tortelli men treat women like flies; Tortelli men's brains are in their flies".
October 26, 2023 at 4:22 pm
I am not sure about a windows user.
However, a database user without login cannot log into SQL Server, but exists as a database object and can be granted or denied permissions. They are useful for impersonation and gaining necessary permissions.
By using SQL users without logins, it is easier to move the application to a new instance and limits the connectivity requirements for the function.
Users without logins are very valuable when used in conjunction with the EXECUTE AS statement. The EXECUTE AS statement can be used to change the execution permission context for TSQL batch code, stored procedures, and functions.
=======================================================================
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply