Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2008 Forums
 SQL Server Administration (2008)
 Login Issue

Author  Topic 

ksr39
Posting Yak Master

193 Posts

Posted - 2015-01-12 : 14:08:06
Hi Experts,

I have an issue with one of my login, my user login should have only read & write permissions but it is having dbo. When I remove the database owner permissions it is coming again. Is this any version issue in SQL or I am missing any thing.

Please suggest.

Server: SQL 2008 r2 SP2.


Thank You All In Advance
SRK39

gbritton
Master Smack Fu Yak Hacker

2780 Posts

Posted - 2015-01-12 : 14:11:24
Is that user somehow assigned to the sysadmin role?
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2015-01-12 : 14:13:15
Is the user the owner of the database? Run sp_helpdb to see who owns it.

Tara Kizer
SQL Server MVP since 2007
http://weblogs.sqlteam.com/tarad/
Go to Top of Page

ksr39
Posting Yak Master

193 Posts

Posted - 2015-01-12 : 14:19:41
Thank you for the quick response,
No the user is a domain account and it is not owner to any database. no the roles are just simple public.

Thank You All In Advance
SRK39
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2015-01-12 : 14:26:22
This might be a bug in SSMS. I no longer see it in the SSMS 2012 client, but I did see something similar in the 2008/2008 R2 client. The user wasn't actually mapped to dbo, SSMS was just displaying it as so.

Instead of viewing it in the GUI, run this to check role membership:

EXEC sp_helpuser 'usergoeshere';

Tara Kizer
SQL Server MVP since 2007
http://weblogs.sqlteam.com/tarad/
Go to Top of Page

ksr39
Posting Yak Master

193 Posts

Posted - 2015-01-12 : 15:24:16
it shows role_name as developer, but when the developer checks he is able to write on the database. where he should be having only read.

Thank You All In Advance
SRK39
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2015-01-12 : 15:26:27
Your original post says he should be able to read AND write but not have dbo. But your latest post says he should only be able to read. I'm confused.

Can he ALTER anything?

Tara Kizer
SQL Server MVP since 2007
http://weblogs.sqlteam.com/tarad/
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2015-01-12 : 15:26:38
And what permissions does role_name provide?

Tara Kizer
SQL Server MVP since 2007
http://weblogs.sqlteam.com/tarad/
Go to Top of Page
   

- Advertisement -