Welcome to Sign in | Help
in Search

SSMS - Afisarea bazelor de date pe care exista drepturi

Last post 11-09-2006, 1:49 PM by xmldeveloper. 1 replies.
Sort Posts: Previous Next
  •  11-09-2006, 1:45 PM 818

    SSMS - Afisarea bazelor de date pe care exista drepturi

    Intrebare de pe RONUA:

    livehosting wrote the following post at 11-07-2006 7:42 :

         Stie cumva cineva cum sa fac ca atunci cand un user se conecteaza la serverul de msql 2005 prin sql server management studio sa nu ii afiseze toate bazele de date la care nu are access? Am inteles de la cineva ca ar exista un script care il aplic la master table dar dupa lungi cautari nu l-am gasit niciunde.

    Multumesc.


    Cristian Andrei Lefter, SQL Server MVP
    MCT, MCSA, MCDBA, MCAD, MCSD .NET,
    MCTS, MCITP - Database Administrator SQL Server 2005
    http://sqlserver.ro
    Filed under:
  •  11-09-2006, 1:49 PM 819 in reply to 818

    Re: SSMS - Afisarea bazelor de date pe care exista drepturi

    Exista mai multe solutii:

    1. Customer Use of SQL Server Management Studio
    2. FAQ: How do I prevent users from seeing DBs in Enterprise Manager/SSMS that they don't have rights to?

    SSMS Security and Display Concerns

    If you decide to operate shared servers that are accessible by SSMS, consider modifying the views available so that you will hide the customer's databases from each other. By default, SSMS will display all databases on the server. For shared servers, this is an obscurity issue. To resolve this issue, there is a view that can be revoked or denied.

    View any database — Is the view that needs to be either revoked globally or denied per logon to enable SSMS to hide the databases that an end customer doesn’t have rights to access. One example of this view being used is discussed in the following section.

    Revoke View any Database from Public — Prepares the server to filter customers so they can only access their database. When databases are created on the server for the customers, those customers will not be able to see other databases.

      Note

    Because you revoked the view from public, the end customer must be made the owner of the database to see the database within SSMS. A simple way to do this is to use the stored procedure: sp_changedbowner. With these two changes, SSMS will only display the database where the end customer has access permissions.

    The example above shows the end customer as the database owner. Ensure that your provision strategy supports this level of permission for the end customer. If you desire a different level of end customer permissions, modify this for your specific requirements.


    Cristian Andrei Lefter, SQL Server MVP
    MCT, MCSA, MCDBA, MCAD, MCSD .NET,
    MCTS, MCITP - Database Administrator SQL Server 2005
    http://sqlserver.ro
View as RSS news feed in XML
Powered by Community Server (Commercial Edition), by Telligent Systems