Creating read only user

  • guys,

     

    I have created user developer and assigned it 2 roles (public, db_datareader), but still I am able to run DMl

    updates on the databse ny logging with developer user.

     

    Is there something that I am missing

     

    any suggestions/inputs would help

     

    Thanks

  • You might check out what permissions have been given to the 'public' user group.  I've seen databases where public was given everything (usually test/development databases) and it was very difficult to do any permission/access testing in that sort of environment.  If this is the case, you probably want to revoke permissions from public and just add back the ones which are actually appropriate.

     


    And then again, I might be wrong ...
    David Webb

  • You also need to select db_denydatawriter along with public, db_datareader.   It will work by doing this.

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply