Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
sunnyjassal
Starting Member
28 Posts |
Posted - 2004-09-15 : 12:03:59
|
| Hello -I have been trying to figure this out for days but still cant get it out. I think I have an idea to fix this, but there are too many options to pick from.Here is the problem. If I create a user and assign him to a database he cannot see any database when he logs on through Enterprise Manager. He can only see the DB's if I allow him into master (over here I deny him to write anything to master). this user is db_owner of the database assigned to him. Obviously I do not want this user to have access to master.I have a feeling that my public permissions on master are incorrect. If they are what do I need to set in those permissions so the user can log and see the DB's. It is wierd because he is able to log into Enterprise Manager and can see the nodes but once clicks on the Database node he sees nothing under the node.This is true for all the users that were created. Unless they dont have access to master they cannot see DB's when they log onto Enterprise Manager which makes me think something is wrong with the public access.Thanks for you help in advance.Sunny Jassal |
|
|
sunnyjassal
Starting Member
28 Posts |
Posted - 2004-09-15 : 12:23:48
|
| I think I figured out the problem. For master database I had guest checked to db_denydatareader and db_deny_datawriter and publicAs soon as I removed db_denydatareader and db_deny_datawriter. It works.Now my question is .. should guest be allowed public role? |
 |
|
|
derrickleggett
Pointy Haired Yak DBA
4184 Posts |
Posted - 2004-09-15 : 20:06:48
|
| When you create a user, you need to set their default database to one of the user databases they actually have permissions to. In addition, you need to correct the default db for those who currently have master. sp_defaultdb will do this for you.You should not use the public or guest role for anything really. I restrict it down to almost nothing.MeanOldDBAderrickleggett@hotmail.comWhen life gives you a lemon, fire the DBA. |
 |
|
|
|
|
|