SQL Server Forums
Profile | Register | Active Topics | Members | Search | Forum FAQ
 
Register Now and get your question answered!
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 Domain Service Account has db_datareader mistake
 New Topic  Reply to Topic
 Printer Friendly
Author Previous Topic Topic Next Topic  

ostinoh
Yak Posting Veteran

66 Posts

Posted - 07/18/2013 :  15:36:59  Show Profile  Reply with Quote
Hello -

Found out that the DBA before me had db_datareader checked for a sensitive database. Now as I understand it that grants Select on all tables within that database. Correct?

This same service account also has a Securables set up to a View I'll call (A). The view is the only thing this Service Account should be able to select and see. View (A) calls up other tables in the same databases as well just as a side note.

My question is if I removed the db_datareader on that Servicve Account will that account now not be able to Select from the underlieing tables?

I hope that makes sense. We are to fix this with breaking the app but wanted to lock down the database.

Regards,
David

russell
Pyro-ma-ni-yak

USA
5072 Posts

Posted - 07/18/2013 :  16:45:59  Show Profile  Visit russell's Homepage  Reply with Quote
As long as all of the objects referenced in the view live in the same database, then GRANT SELECT ON <View Name> To <UserName> will suffice.
Go to Top of Page

ostinoh
Yak Posting Veteran

66 Posts

Posted - 07/19/2013 :  08:43:31  Show Profile  Reply with Quote
Russell -

Thank you... That is the answer I was looking and hoping for.

Regards,
Go to Top of Page

ostinoh
Yak Posting Veteran

66 Posts

Posted - 07/19/2013 :  09:23:48  Show Profile  Reply with Quote
quote:
Originally posted by russell

As long as all of the objects referenced in the view live in the same database, then GRANT SELECT ON <View Name> To <UserName> will suffice.



Russell -

Well I spoke to soon. After re-looking at the view I found that there is another database with referenced tables that are part of a Inner Join, Left Join and From.

How does that affect what I can do?

Regards,
David
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic  Reply to Topic
 Printer Friendly
Jump To:
SQL Server Forums © 2000-2009 SQLTeam Publishing, LLC Go To Top Of Page
This page was generated in 0.05 seconds. Powered By: Snitz Forums 2000