July 6, 2009 at 7:22 am
Guys,
How we can revoke the permission to create the diagram on database to the user who has only read/write permissions or to the user who is not under db_owner.
Abhijit - http://abhijitmore.wordpress.com
July 6, 2009 at 8:20 am
DB owner or person with sysadmin role only has perms to create DB diagrams. They can have db roles of
1. db_datareader
2. db_datawriter
BOL: Only the owner of the diagram or a member of the db_owner role of the database can open the diagram.
-MJ
Please do not print mails and docx unless it is absolutely necessary. Spread environmental awareness.
July 6, 2009 at 12:01 pm
Actually, db_owner and sysadmin are the only ones who can enable diagramming in a database. After that's done, any database user can create diagrams.
Assuming diagramming has already been enabled, you can try denying execute permission on the sp_creatediagram stored procedure for the user whom you don't want to create diagrams.
Greg
July 6, 2009 at 12:26 pm
Keep in mind that denying permission might result in errors and then phone calls.
Why do you want to prevent this? They don't take up much space.
July 8, 2009 at 2:04 am
Steve you are abosolutly correct but the thing is i want to prevent it in development enviornment as App deve offen create the diagrams which different names & i want to revoke this ...
-Abhijit
Abhijit - http://abhijitmore.wordpress.com
July 8, 2009 at 8:46 am
Oh Abhijit.
I am sure that you would be using sp_creatediagram sp in your application. can you revoke execute permission on this from those users? This would help.
REVOKE EXECUTE ON OBJECT::DatabaseName.SPName
FROM YOurUser;
-MJ
Please do not print mails and docx unless it is absolutely necessary. Spread environmental awareness.
Viewing 6 posts - 1 through 5 (of 5 total)
You must be logged in to reply to this topic. Login to reply