Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
Author |
Topic |
qwertyjjj
Posting Yak Master
131 Posts |
Posted - 2008-07-30 : 06:26:54
|
I have given someone access to the SQL server via windows integrated authentication.In the properties I tick 2 databases that they have access to and public role.However, they still seem to be able to select from other databases ion their EM or QA when they should not have access?Any ideas? |
|
jason7655
Starting Member
24 Posts |
Posted - 2008-07-30 : 09:04:32
|
Check the other databases that they are accessing inappropriately and see what the security on those is. |
 |
|
qwertyjjj
Posting Yak Master
131 Posts |
Posted - 2008-07-30 : 09:20:14
|
The databases don't have direct permissions, only at the table and store dprocedure level and none of those have any of the public roles ticked. Either way it should surely block them out?It says I cannot remove the user from the public role either ? |
 |
|
sodeep
Master Smack Fu Yak Hacker
7174 Posts |
Posted - 2008-07-30 : 17:14:31
|
Did you give them object level permission directly or are they included in server role?Run sp_helprotect |
 |
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-07-30 : 21:50:34
|
Are they local admin? Did you remove builtin\administrators from sysadmin? They may get permission via builtin\administrators. |
 |
|
|
|
|