November 13, 2007 at 9:46 am
I ran into an issue yesterday related to permissions on the master db. Specifically, permission settings on the syslogins view. A developer indicated to me that he was not able to edit a SP in a database. When he tried to edit the SP, he would receive the following message: SELECT permission denied on object 'syslogins', database 'master', owner 'dbo'..
This developer has "db_owner" set on the database. He can't edit SPs or views, but he can open/run them. This developer accesses the database via a domain account. As it turns out, no domain accounts can perform an edit on a SP, even if the domain account has "db_owner." I created a SQL account and granted the account "db_owner." This SQL account can edit SPs and views.
I viewed permissions on syslogins from within EM, and the settings look identical to the settings for this view on other servers that I have access to.
I then ran sp_helprotect from query analyzer on syslogins, and noticed significant differences as compared to the other servers. I then ran sp_helprotect on the entire master database and noticed over 30 differences in the permissions between the database/server in question as compared to several other servers.
To make a long story short, is there a way for me to reset permissions on the master db to the default values? Obviously, something was changed. I would like to get this master database back to the original permission settings.
Thanks for any assistance that you may be able to provide!!!
Tom
November 13, 2007 at 10:49 am
need to script the logins from a different server u trust to be right. there aren't "default" permissions per se.
by the way, dbo has permission to modify any object in database.
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply