Post reply

Problems using db_ddladmin role

  • June 5, 2009 at 10:05 am

    #132936

    HI,

    I have a developer who is working in a test environment and I assigned him to the db_ddladmin role. He used query analyzer to create a table(which he was able to do) but in the process it gave him warning messages. Then after creating table, he could not alter it in anyway. Now he informed me that he has no problem using visual studio 2008 to work with the table. I have been doing some research on the internet and see this is not an uncommon scenario for the db_ddladmin role to appear to not work in the gui environment. I finally just made him a member of the db_owner role and everything worked everywhere. But I really don't want to do this on a normal routine.

    Can someone explain why this is happening? and is there a best practices on assigning permissions to allow developers to create their own objects, ie( what roles to assign them??) My goal is for them to create their own tables, stored procs, views ...

    Thanks so much,

    Juanita 😛

  • June 5, 2009 at 11:01 am

    #1005435

    Is he part of an NT group? If so, this is a known problem and according to M$ it is by design ...

    http://social.msdn.microsoft.com/forums/en-US/sqlsecurity/thread/7d46a024-7ed5-4c9b-b091-3640dc04f5a1/[/url]

  • June 5, 2009 at 1:13 pm

    #1005500

    HI Adam,

    Actualy on this particular sql server instance he has his own windows login and then there is a windows group that he is also a part of. Thank you for the link

    Juanita

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply