Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
Author |
Topic |
ksr39
Posting Yak Master
193 Posts |
Posted - 2015-01-12 : 14:08:06
|
Hi Experts,I have an issue with one of my login, my user login should have only read & write permissions but it is having dbo. When I remove the database owner permissions it is coming again. Is this any version issue in SQL or I am missing any thing.Please suggest.Server: SQL 2008 r2 SP2.Thank You All In AdvanceSRK39 |
|
gbritton
Master Smack Fu Yak Hacker
2780 Posts |
Posted - 2015-01-12 : 14:11:24
|
Is that user somehow assigned to the sysadmin role? |
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2015-01-12 : 14:13:15
|
Is the user the owner of the database? Run sp_helpdb to see who owns it.Tara KizerSQL Server MVP since 2007http://weblogs.sqlteam.com/tarad/ |
|
|
ksr39
Posting Yak Master
193 Posts |
Posted - 2015-01-12 : 14:19:41
|
Thank you for the quick response, No the user is a domain account and it is not owner to any database. no the roles are just simple public.Thank You All In AdvanceSRK39 |
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2015-01-12 : 14:26:22
|
This might be a bug in SSMS. I no longer see it in the SSMS 2012 client, but I did see something similar in the 2008/2008 R2 client. The user wasn't actually mapped to dbo, SSMS was just displaying it as so.Instead of viewing it in the GUI, run this to check role membership:EXEC sp_helpuser 'usergoeshere';Tara KizerSQL Server MVP since 2007http://weblogs.sqlteam.com/tarad/ |
|
|
ksr39
Posting Yak Master
193 Posts |
Posted - 2015-01-12 : 15:24:16
|
it shows role_name as developer, but when the developer checks he is able to write on the database. where he should be having only read.Thank You All In AdvanceSRK39 |
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2015-01-12 : 15:26:27
|
Your original post says he should be able to read AND write but not have dbo. But your latest post says he should only be able to read. I'm confused. Can he ALTER anything?Tara KizerSQL Server MVP since 2007http://weblogs.sqlteam.com/tarad/ |
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2015-01-12 : 15:26:38
|
And what permissions does role_name provide?Tara KizerSQL Server MVP since 2007http://weblogs.sqlteam.com/tarad/ |
|
|
|
|
|