Permissions

Question

Permissions

DBA_318

SSC Enthusiast

Points: 196
More actions
June 30, 2021 at 9:25 pm

#3902255

I restored a database from QA to production. I removed logins/users from database since they all were in same group with READ only. I checked and don't see any explicit permissions, and none of them have a schema or role they are owner of, but one of the users can still update stuff in this database. I had the other DBA check and he couldn't find anything either.
What in the world am I missing here?

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply

Jeffrey Williams SSC Guru Points: 90303 More actions · Answer 1

Check that users login - are they a member of the sysadmin role? Check other groups that have access to the server - do any of those groups have access to the database where this user is a member?

Jeffrey Williams
“We are all faced with a series of great opportunities brilliantly disguised as impossible situations.”

― Charles R. Swindoll

How to post questions to get better answers faster
Managing Transaction Logs

DBA_318 SSC Enthusiast Points: 196 More actions · Answer 2

He is not a member of sysadmin role.

He is in one group, but it has read only and that is it.

It must be something that carried over from the other environment, but just can't figure it out yet. So bizarre.

Jeff Moden SSC Guru Points: 1004378 More actions · Answer 3

DBA_318 wrote:

He is not a member of sysadmin role.
He is in one group, but it has read only and that is it.
It must be something that carried over from the other environment, but just can't figure it out yet. So bizarre.

Have you tried using xp_LoginInfo to make sure of that?

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

DBA_318 SSC Enthusiast Points: 196 More actions · Answer 4

I found him in another group as Admin and have no clue how or why he is there.

Thanks Jeff!

Jeff Moden SSC Guru Points: 1004378 More actions · Answer 5

My pleasure and thank you for the feedback. xp_LoginInfo is one of those tools that I don't need to use often but it's a real life saver when I do need it.

Another handy tool is sp_validatelogins.

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)