February 16, 2009 at 6:26 am
Your supplier's response still doesn't make sense to me. I can see granting reference to the defined user datatypes in the specific supplier's database, but not in TempDB.
I take it from your response that you have the Guest account actually enabled already? If it's disabled, leave it that way and tell your supplier due to security issues you can't grant access to the Guest account. If it's already enabled, tell your supplier that you can't realistically grant access to the TempDB because the TempDB is not a static database.
Either way, your response should be "If you give us a better explanation of your needs, we can give you specific REFERENCES access to your database alone, but we cannot give you access to TempDB."
BTW, I don't know about the security issue question you asked, but you should test it in a test environment. Even if you're sysadmin, you can still log into Test as a Guest yourself and see just what kind of access you'd have if you did as the supplier asked.
February 16, 2009 at 6:28 am
Guest User account is a dangerous account. I would not grant any permissions to it. Why dont you create a login for this and assign permissions to it individually?
the supplier will have its own login, I agree that, in case, it would be better to give the permission only to that login.
But, granting references to schema :: dbo to suppl_login, it could also have visibility of all dbo schemas?
February 16, 2009 at 6:38 am
Granting references to DBO schema will indeed grant the ability to see the definitions to all DBO objects in that specific database. And remember, DBO doesn't own all schemas unless you specifically change the other schema owners.
Which is why I recommend only the supplier's database and why I said I wouldn't grant any access at all, even on that level, without a better explanation of what the supplier is trying to accomplish.
But again, I don't know what granting that permission in TempDB will do, which is why I recommend you test it in a Test environment. What better way to see if there are security leaks than to try it out yourself?
February 16, 2009 at 6:47 am
I will try to know more details about our supplier's request. My difficulty is tha i can't talk with the programmer directly, but with the supplier, who has to contact the person working quite far and not always reachable...
He is asking to run a code in tempdb at startup to recreate the permission.
February 16, 2009 at 6:50 am
Many, many thanks, I will test.
sb
February 16, 2009 at 6:56 am
Just for information, after rebooting the server, I still get the same error if I try to add a new datafile.
It's quite strange.
February 16, 2009 at 7:41 am
Try switching the Model DB back to FULL recovery for a moment, backing up the transaction log, then switching Model back to SIMPLE. Then see if you can add the data file.
February 17, 2009 at 3:58 am
Thanks for your new ideas, I've tried to backup model's transaction logs, but I still get the same error.
I've tried also dump transaction with no_log with no success.
Checkdb found 0 allocation errors and 0 consistency errors in database.
what it can be...
February 17, 2009 at 4:30 am
What service pack are you on?
And have you tried searching TechNet to see if there's an existing bug yet?
February 17, 2009 at 4:53 am
After a few tryes, our consulent has solved the problem: the first datafile, which run out of space, contains the data of sysfiles1 and there were problems in adding its index.
sp_spaceused 'sys.sysfiles1' found index_size=0
I've allowed 50 Mb of autogrowth by 1 Mb, after adding the datafile (finally!) it grew of 1 Mb, a big problem for 6 Kb!!!
Thanks for help, I hope that this experience can be useful.
sb
😀
February 17, 2009 at 5:30 am
How did he fix the index problem?
February 17, 2009 at 6:06 am
half knowledge and half luck...
he knew that there is an index in sysfiles1,
sp_spaceused 'sys.sysfiles1' told that index_size=0, it means it had not been possible to allocate space for that index.
February 19, 2009 at 4:01 am
Right. I got that part.
The question is, what did he do after he found that information? How did he fix the "0" problem?
March 10, 2009 at 11:43 am
I had the same problem. Fixed it in the same way.
Just allowed the primary data file to increase by 500MB. That allowed me add new datafiles.
Thanks.
March 10, 2009 at 11:58 am
Gags,
Please elaborate. What do you mean "fixed it the same way"?
What precisely did you do to fix the index=0 issue to allow the datafile to grow, please?
Viewing 15 posts - 16 through 30 (of 36 total)
You must be logged in to reply to this topic. Login to reply