Hi

I have a SQLServer with many databases.

I have set up a standard user that specifically has access to just one of
the databases and their permissions are restricted to just reading/writing
data within that database.

Within query analyzer, they can only see their user database; all other user
databases do not display.  This is great, but when they use Enterprise
Manager, they get to see (although not access) all the other user databases.
Is there any way to force these to be hidden?

Secondly, within both Enterprise Manager and Query Analyzer, they can see
and access the Master database (and other system databases).  This
potentially exposes further information about the other user databases (e.g.
looking at the sysobjects table).  I've not tried it, but they may be able
to edit data in the master DB tables too (which would be scary...).

What do I have to do to stop the user from being able to read data from the
master DB's tables?

Thanks

Griff