I have a sql server 2000 and i want that a user have only acess to a
determined table in a database. I don't want the user can browse the other
objects thru the object browser in the query analizer. Is that possible?
--
JLoboNo they can see objects. They can only access the objects
you grant permissions to though.
-Sue
On Wed, 15 Mar 2006 08:20:11 -0800, JLobo
<JLobo@.discussions.microsoft.com> wrote:
>I have a sql server 2000 and i want that a user have only acess to a
>determined table in a database. I don't want the user can browse the other
>objects thru the object browser in the query analizer. Is that possible?
Showing posts with label permission. Show all posts
Showing posts with label permission. Show all posts
Tuesday, February 14, 2012
deny permission to create temporary tables
Dear All,
This is my first post to this forum.
I would like to know if there is any way to restrict users from creating temp tables.
Problem: I am facing problems with lots of temporary objects getting created in my database. The users have read-only access to the database for adhoc-querying purpose through QA. Yet they are able to create temporary tables in tempdb database taking lot of resources on tempdb disk causing abnormally high growth of tempdb.
Thanks in advance.
Best Regards,
Chetan Jain
Just by executing a query, users may be using space in TempDb -that is what it is designed for. Query execution may, totally on its own volition, create temporary tables in TempDb. TempDb can growth large if the users are executing queries that require a lot of temporary storage to gather data to work with -JOINs with large resultsets, large resultsets to be sorted, etc.
Are the users creating tables 'temp' tables (starting with [#], or [##]? Or, are they creating tables?
Normally, the users' temp objects are removed from TempDb when the user connection is closed.
Perhaps the real issue is trying to determine how much space TempDb requires in order to support your users query needs, and then giving TempDb adaquate disk space.
|||You can not stop any user from creating temprory objects in tempdb. ofcourse you can stop creating permanent table in tempdb by DDL trigger. but DDL trigger can not sense temp table.
create TRIGGER db_trg_RestrictTableChanges
ON DATABASE
FOR CREATE_Table, ALTER_Table, DROP_Table
AS
SET NOCOUNT ON
rollback
the above mentioned trigger will stop creating permanent tables in tempdb but even this can not stop temporary table
Madhu
|||Madhu's suggestion is certainly a valid one, but, unfortunately, only works in SQL 2005 (and higher).|||Thanks for the information!. The real issue is denying explicit statements like "create table #temp" or "create table ##temp"
Best Regards,
Chetan
|||As Madhu indicated, you can't even deny creating temp tables in SQL 2005 using the new DDL Triggers -and you also can't do so in SQL 2000.
Just make sure that the users are logging out, and then their connection will be cleared, and the space used for any temp tables will be released.
deny permission help
Hello,
I am using sql server 7.0, I want to deny permission to certain extended procedures in the master database to all the dbowners of other databases. Please tell me the syntax of the command with example.
koolnyzeMake sure the dbo accounts don't have explicit access to your master database (the dbo in master is not necessarily the same as the dbo in the other databases). Then deny permission to the guest user role in master for whatever procedures you want to disallow.
Since you are making a change in your master database, be sure to back it up!
blindman|||Hi,
I want to deny the permission to dbowners for getting the directory list when they click on the backup destination for taking backups. I have denied execute pemission to guest and public for xp_availablemedia but still the dbowners are able to get the directory list. Can you please suggest how to achieve this?
Koolnyze|||Microsoft's support webset (http://support.microsoft.com/default.aspx?scid=kb;en-us;323249) had this to say:
"Only members of the SQL Server system administrators role (sysadmin) can view the directory structure and select local backup files. "
Try going into the SQL Server Security/Logins folder in Enterprise Manager. Right click on the login, select Properties, and go to the Server Roles tab to make sure that the login is not a member of the system administrators server role.
I didn't try this, so let me know if it works!
blindman|||"Try going into the SQL Server Security/Logins folder in Enterprise Manager. Right click on the login, select Properties, and go to the Server Roles tab to make sure that the login is not a member of the system administrators server role."
I checked it and the login does not have any role selected. The login has been made dbowner of one database only and cannot access any other database. Still the login is able to browse the directory tree. Any other seggestions.
koolnyze|||Jeez, I'm running out of ideas.
What about looking at the server roles themselves (System Administrators and maybe Disk Administrators) to see who IS a member? Perhaps your users have administrative access through their network login account?
Sorry I can't be of more help, but this is getting into an area where I have less expertise. A network administrator might be able to help you out.
blindman|||I have thoroughly checked but everything seems fine. It seems that something else also needs to be done before the permission to deny the view of directory tree will be effected.
Thanks for your help
koolnyze|||Hi,
Only denying permission to xp_availablemedia doesn't work. When I denied permission to xp_fixeddrives also, it started working.
koolnyze
I am using sql server 7.0, I want to deny permission to certain extended procedures in the master database to all the dbowners of other databases. Please tell me the syntax of the command with example.
koolnyzeMake sure the dbo accounts don't have explicit access to your master database (the dbo in master is not necessarily the same as the dbo in the other databases). Then deny permission to the guest user role in master for whatever procedures you want to disallow.
Since you are making a change in your master database, be sure to back it up!
blindman|||Hi,
I want to deny the permission to dbowners for getting the directory list when they click on the backup destination for taking backups. I have denied execute pemission to guest and public for xp_availablemedia but still the dbowners are able to get the directory list. Can you please suggest how to achieve this?
Koolnyze|||Microsoft's support webset (http://support.microsoft.com/default.aspx?scid=kb;en-us;323249) had this to say:
"Only members of the SQL Server system administrators role (sysadmin) can view the directory structure and select local backup files. "
Try going into the SQL Server Security/Logins folder in Enterprise Manager. Right click on the login, select Properties, and go to the Server Roles tab to make sure that the login is not a member of the system administrators server role.
I didn't try this, so let me know if it works!
blindman|||"Try going into the SQL Server Security/Logins folder in Enterprise Manager. Right click on the login, select Properties, and go to the Server Roles tab to make sure that the login is not a member of the system administrators server role."
I checked it and the login does not have any role selected. The login has been made dbowner of one database only and cannot access any other database. Still the login is able to browse the directory tree. Any other seggestions.
koolnyze|||Jeez, I'm running out of ideas.
What about looking at the server roles themselves (System Administrators and maybe Disk Administrators) to see who IS a member? Perhaps your users have administrative access through their network login account?
Sorry I can't be of more help, but this is getting into an area where I have less expertise. A network administrator might be able to help you out.
blindman|||I have thoroughly checked but everything seems fine. It seems that something else also needs to be done before the permission to deny the view of directory tree will be effected.
Thanks for your help
koolnyze|||Hi,
Only denying permission to xp_availablemedia doesn't work. When I denied permission to xp_fixeddrives also, it started working.
koolnyze
DENY permission
Hi ,
i have set up to db roles "Admin" which have been
granted select , delete , insert , update
and "test" which has been granted select and DENY update
i have set up a user "user1" account which is part of
the "Admin" and "test" db role.
In this case will "user1" be denied the ability to
UPDATE ?
AND if i also set up user1 as a system administrator
fixed server role besides the 2 db role above , will the
DENY update has any effect on user1 ?
thks & rdgs
Hi,
Answer to your queries:-
In this case will "user1" be denied the ability to UPDATE ?
Ans: - Yes, User will not be able to select and update.
if i also set up user1 as a system administrator fixed server role besides
the 2 db role above , will the
DENY update has any effect on user1 ?
Ans: - Sysadmin role will override all the roles or Deny permissions. The
user with SYADMIN role can do any functionality in the SQL server
as well as all databases.
Thanks
Hari
MCDBA
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs
|||IN addition permissions are cumulative across all of the roles, etc which
apply to a user, THEN subtract out all of the DENY permissions... ( Deny
overrides a grant.)
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs
i have set up to db roles "Admin" which have been
granted select , delete , insert , update
and "test" which has been granted select and DENY update
i have set up a user "user1" account which is part of
the "Admin" and "test" db role.
In this case will "user1" be denied the ability to
UPDATE ?
AND if i also set up user1 as a system administrator
fixed server role besides the 2 db role above , will the
DENY update has any effect on user1 ?
thks & rdgs
Hi,
Answer to your queries:-
In this case will "user1" be denied the ability to UPDATE ?
Ans: - Yes, User will not be able to select and update.
if i also set up user1 as a system administrator fixed server role besides
the 2 db role above , will the
DENY update has any effect on user1 ?
Ans: - Sysadmin role will override all the roles or Deny permissions. The
user with SYADMIN role can do any functionality in the SQL server
as well as all databases.
Thanks
Hari
MCDBA
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs
|||IN addition permissions are cumulative across all of the roles, etc which
apply to a user, THEN subtract out all of the DENY permissions... ( Deny
overrides a grant.)
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs
DENY permission
Hi ,
i have set up to db roles "Admin" which have been
granted select , delete , insert , update
and "test" which has been granted select and DENY update
i have set up a user "user1" account which is part of
the "Admin" and "test" db role.
In this case will "user1" be denied the ability to
UPDATE ?
AND if i also set up user1 as a system administrator
fixed server role besides the 2 db role above , will the
DENY update has any effect on user1 ?
thks & rdgsHi,
Answer to your queries:-
In this case will "user1" be denied the ability to UPDATE ?
Ans: - Yes, User will not be able to select and update.
if i also set up user1 as a system administrator fixed server role besides
the 2 db role above , will the
DENY update has any effect on user1 ?
Ans: - Sysadmin role will override all the roles or Deny permissions. The
user with SYADMIN role can do any functionality in the SQL server
as well as all databases.
Thanks
Hari
MCDBA
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs|||IN addition permissions are cumulative across all of the roles, etc which
apply to a user, THEN subtract out all of the DENY permissions... ( Deny
overrides a grant.)
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs
i have set up to db roles "Admin" which have been
granted select , delete , insert , update
and "test" which has been granted select and DENY update
i have set up a user "user1" account which is part of
the "Admin" and "test" db role.
In this case will "user1" be denied the ability to
UPDATE ?
AND if i also set up user1 as a system administrator
fixed server role besides the 2 db role above , will the
DENY update has any effect on user1 ?
thks & rdgsHi,
Answer to your queries:-
In this case will "user1" be denied the ability to UPDATE ?
Ans: - Yes, User will not be able to select and update.
if i also set up user1 as a system administrator fixed server role besides
the 2 db role above , will the
DENY update has any effect on user1 ?
Ans: - Sysadmin role will override all the roles or Deny permissions. The
user with SYADMIN role can do any functionality in the SQL server
as well as all databases.
Thanks
Hari
MCDBA
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs|||IN addition permissions are cumulative across all of the roles, etc which
apply to a user, THEN subtract out all of the DENY permissions... ( Deny
overrides a grant.)
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs
DENY permission
Hi ,
i have set up to db roles "Admin" which have been
granted select , delete , insert , update
and "test" which has been granted select and DENY update
i have set up a user "user1" account which is part of
the "Admin" and "test" db role.
In this case will "user1" be denied the ability to
UPDATE ?
AND if i also set up user1 as a system administrator
fixed server role besides the 2 db role above , will the
DENY update has any effect on user1 ?
thks & rdgsHi,
Answer to your queries:-
In this case will "user1" be denied the ability to UPDATE ?
Ans: - Yes, User will not be able to select and update.
if i also set up user1 as a system administrator fixed server role besides
the 2 db role above , will the
DENY update has any effect on user1 ?
Ans: - Sysadmin role will override all the roles or Deny permissions. The
user with SYADMIN role can do any functionality in the SQL server
as well as all databases.
Thanks
Hari
MCDBA
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs|||IN addition permissions are cumulative across all of the roles, etc which
apply to a user, THEN subtract out all of the DENY permissions... ( Deny
overrides a grant.)
--
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs
i have set up to db roles "Admin" which have been
granted select , delete , insert , update
and "test" which has been granted select and DENY update
i have set up a user "user1" account which is part of
the "Admin" and "test" db role.
In this case will "user1" be denied the ability to
UPDATE ?
AND if i also set up user1 as a system administrator
fixed server role besides the 2 db role above , will the
DENY update has any effect on user1 ?
thks & rdgsHi,
Answer to your queries:-
In this case will "user1" be denied the ability to UPDATE ?
Ans: - Yes, User will not be able to select and update.
if i also set up user1 as a system administrator fixed server role besides
the 2 db role above , will the
DENY update has any effect on user1 ?
Ans: - Sysadmin role will override all the roles or Deny permissions. The
user with SYADMIN role can do any functionality in the SQL server
as well as all databases.
Thanks
Hari
MCDBA
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs|||IN addition permissions are cumulative across all of the roles, etc which
apply to a user, THEN subtract out all of the DENY permissions... ( Deny
overrides a grant.)
--
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"maxzsim" <anonymous@.discussions.microsoft.com> wrote in message
news:0d4a01c484cd$c77bfbd0$a301280a@.phx.gbl...
> Hi ,
> i have set up to db roles "Admin" which have been
> granted select , delete , insert , update
> and "test" which has been granted select and DENY update
> i have set up a user "user1" account which is part of
> the "Admin" and "test" db role.
> In this case will "user1" be denied the ability to
> UPDATE ?
> AND if i also set up user1 as a system administrator
> fixed server role besides the 2 db role above , will the
> DENY update has any effect on user1 ?
> thks & rdgs
Subscribe to:
Posts (Atom)