May 4, 2006 at 11:29 am
HI. I set up a sql login for a user and when they open up query analyzer they not only see the database they have access to but they can also see the temp and master databases. is there a way for these 2 databases not to show? Or can they not do any damage? the userid has db owner on the database it has access to and that is it.
Thanks,
Juanita
May 4, 2006 at 11:55 am
They can see Master and TEMPDB because they are a member of the Public group which has access to those databases. Check the logins and you should see that Public user has very little permissions.
-SQLBill
May 4, 2006 at 12:02 pm
So if that is an automatick setup, I shouldn't worry that the user could damage any data in the master db? or do administrators typically take them out of this public role?
thank you,
Juanita
May 4, 2006 at 1:34 pm
You can't take anyone out of the Public role. Almost every query, at one time or another, makes use of the Master or TempDB tables. System stored procedures are stored in the Master datbase as is the database/table schema. If you look at the permissions for the Public role, you will see that they don't have much 'power'.
-SQLBill
May 4, 2006 at 1:40 pm
HI.. I see it now. I did go read about the public role and now I understand. Thanks so much for the information!!
Juanita
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply