DatabaseMailUserRole Security - add public role as member?

  • Would there be any security-related concerns if the public role was added as member of the DatabaseMailUserRole role in msdb database? I am trying to simplify user access to database mail in a production server, but I am not sure if allowing the public role this access has any unwanted implications for security.

    Any thoughts would be welcome.

    __________________________________________________________________________________
    SQL Server 2016 Columnstore Index Enhancements - System Views for Disk-Based Tables[/url]
    Persisting SQL Server Index-Usage Statistics with MERGE[/url]
    Turbocharge Your Database Maintenance With Service Broker: Part 2[/url]

  • It may not cause security issues.

    But, in my opinion, it is better to give DBMail access to only limited number of users.

    Because, it is possible to send large number of spam emails using DBMail.

  • Suresh B. (10/21/2010)


    It may not cause security issues.

    But, in my opinion, it is better to give DBMail access to only limited number of users.

    Because, it is possible to send large number of spam emails using DBMail.

    Thanks, I'll keep that in mind.

    __________________________________________________________________________________
    SQL Server 2016 Columnstore Index Enhancements - System Views for Disk-Based Tables[/url]
    Persisting SQL Server Index-Usage Statistics with MERGE[/url]
    Turbocharge Your Database Maintenance With Service Broker: Part 2[/url]

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply