Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion Groups
DB Engine
SQL ServerMSDESQL Server CE
Services
Analysis (Data Mining)Analysis (OLAP)DTSIntegration ServicesNotification ServicesReporting Services
Programming
CLRConnectivitySQLXML
Other Technologies
ClusteringEnglish QueryFull-Text SearchReplicationService Broker
General
Data WarehousingPerformanceSecuritySetupSQL Server ToolsOther SQL Server Topics
DirectoryUser Groups
Related Topics
MS AccessOther DB ProductsMS Server Products.NET DevelopmentVB DevelopmentJava DevelopmentMore Topics ...

SQL Server Forum / General / Security / January 2008

Tip: Looking for answers? Try searching our database.

SQL Server 2005 security question

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Harold Shapiro - 25 Jan 2008 14:11 GMT
I am new to SQL Server 2005.  I have a user who is db_owner equivalent.  
However, when he starts SQL Server Management Studio (logged in with his ID),
he cannot see anyting in the Securables box under database user properties or
database role properties.  Is there anyway to have him see this information?
Sean McCown - 25 Jan 2008 15:29 GMT
Well, if you're saying that he can't see any securables for his own acct
that's prob true.  He's getting access to all the objects through his group
membership in the DB role he's in.  You'll only see something in securables
if you've been granted something specifically.  Is he having trouble doing
something in the DB, or did he just expect to see something in there?

Signature

Read my book reviews at:
www.ITBookworm.com
 
Blog Author of:
Database Underground -- http://weblog.infoworld.com/dbunderground/ 
DBA Rant – http://dbarant.blogspot.com 

> I am new to SQL Server 2005.  I have a user who is db_owner equivalent.  
> However, when he starts SQL Server Management Studio (logged in with his ID),
> he cannot see anyting in the Securables box under database user properties or
> database role properties.  Is there anyway to have him see this information?
Harold Shapiro - 25 Jan 2008 15:34 GMT
He expects to see information.  he is the one who can control access for
others.  I have granted him access to things, but he still does not see
anything.

Am I doing something wrong?

> I am new to SQL Server 2005.  I have a user who is db_owner equivalent.  
> However, when he starts SQL Server Management Studio (logged in with his ID),
> he cannot see anyting in the Securables box under database user properties or
> database role properties.  Is there anyway to have him see this information?
Sean McCown - 25 Jan 2008 15:49 GMT
Well, I'm an sa on my box and I can't see any securables either.  Like I
said, as long as he can do what he needs, it shouldn't matter.  

Signature

Read my book reviews at:
www.ITBookworm.com
 
Blog Author of:
Database Underground -- http://weblog.infoworld.com/dbunderground/ 
DBA Rant – http://dbarant.blogspot.com 

> He expects to see information.  he is the one who can control access for
> others.  I have granted him access to things, but he still does not see
[quoted text clipped - 6 lines]
> > he cannot see anyting in the Securables box under database user properties or
> > database role properties.  Is there anyway to have him see this information?
Harold Shapiro - 25 Jan 2008 16:37 GMT
What he wants to do is be able to view the table by table permssions for
users or roles without going through each table in the database.

> I am new to SQL Server 2005.  I have a user who is db_owner equivalent.  
> However, when he starts SQL Server Management Studio (logged in with his ID),
> he cannot see anyting in the Securables box under database user properties or
> database role properties.  Is there anyway to have him see this information?
Russell Fields - 25 Jan 2008 20:00 GMT
Harold,

In the database in question, have him run sp_helprotect.

RLF

> What he wants to do is be able to view the table by table permssions for
> users or roles without going through each table in the database.
[quoted text clipped - 6 lines]
>> database role properties.  Is there anyway to have him see this
>> information?
Harold Shapiro - 28 Jan 2008 13:34 GMT
Thank you for the tip.  Is there anyway to graphically display this
information so the dbo can add or take away rights to table, view, setc?

> Harold,
>
[quoted text clipped - 12 lines]
> >> database role properties.  Is there anyway to have him see this
> >> information?
Russell Fields - 28 Jan 2008 21:41 GMT
Harold,

Sure, using SQL Server 2005 Management Studio SP2 and after (and it should
be after, check the recommended patch rollup) this works.  If you SQL
desktop tools and server are at a lower level, none of this works properly.

Having said that, Table Properties / Permissions tab should show who has
explicitly granted rights to a table.  User or Role / Securables should show
all securables for that user or role.  I consider the interface a bit
cumbersome, but it is all there and things can be clicked on or off, objects
added or removed, etc.

RLF

> Thank you for the tip.  Is there anyway to graphically display this
> information so the dbo can add or take away rights to table, view, setc?
[quoted text clipped - 18 lines]
>> >> database role properties.  Is there anyway to have him see this
>> >> information?
Erland Sommarskog - 25 Jan 2008 23:03 GMT
> I am new to SQL Server 2005.  I have a user who is db_owner equivalent.
> However, when he starts SQL Server Management Studio (logged in with his
> ID), he cannot see anyting in the Securables box under database user
> properties or database role properties.  Is there anyway to have him see
> this information?

IF I understand this correctly, your user want to be able to look at the
user PlainVanilla, to see which securables PlainVanilla has access to.
Is that so?

Which version of Mgmt Studio do you have? It sounds like you have the RTM
version or SP1. This was addressed in SP2. You can check the version of
Mgmt Studio under Help About. It should say 9.00.3042 or higher.

Signature

Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se

Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx

 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.