<a href="http://g.adspeed.net/ad.php?do=clk&zid=15220&wd=468&ht=60&pair=as" target="_blank"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15220&wd=468&ht=60&pair=as" alt="i" width="468" height="60"/></a>
Log in
::
Register
::
Not logged in
Home
Tags
Articles
Editorials
Stairways
Forums
Scripts
Videos
Blogs
QotD
Books
Ask SSC
SQL Jobs
Training
Authors
About us
Contact us
Newsletters
Write for us
<a href="http://g.adspeed.net/ad.php?do=clk&zid=15491&wd=120&ht=300&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15491&wd=120&ht=300&pair=as" alt="i" width="120" height="300"/></a>
Recent Posts
Recent Posts
Popular Topics
Popular Topics
Home
Search
Members
Calendar
Who's On
Home
»
SQL Server 2008
»
SQL Server 2008 Administration
»
create a policy in policy management
create a policy in policy management
Rate Topic
Display Mode
Topic Options
Author
Message
sqlfriends
sqlfriends
Posted Friday, January 18, 2013 6:05 PM
SSCommitted
Group: General Forum Members
Last Login: Yesterday @ 6:13 PM
Points: 1,610,
Visits: 2,794
How to create a policy that prevents users to create user objects in master database?
Thanks
Post #1409139
Lynn Pettis
Lynn Pettis
Posted Friday, January 18, 2013 6:17 PM
SSC-Insane
Group: General Forum Members
Last Login: Yesterday @ 11:07 PM
Points: 21,625,
Visits: 27,468
Not so much as a policy, but that could be handled with a DDL trigger.
Lynn Pettis
For better assistance in answering your questions, click here
For tips to get better help with Performance Problems, click here
For Running Totals and its variations, click here
or
when working with partitioned tables
For more about Tally Tables, click here
For more about Cross Tabs and Pivots, click here
and
here
Managing Transaction Logs
SQL Musings from the Desert
Fountain Valley SQL
(My Mirror Blog)
Post #1409142
Jayanth_Kurup
Jayanth_Kurup
Posted Saturday, January 19, 2013 6:47 AM
SSCommitted
Group: General Forum Members
Last Login: Tuesday, May 07, 2013 6:43 AM
Points: 1,785,
Visits: 1,008
If you follow the principal of least privileges the user shouldnt be able to create objects under the master database anyway.
Jayanth Kurup
Post #1409196
sqlfriends
sqlfriends
Posted Sunday, January 20, 2013 5:26 PM
SSCommitted
Group: General Forum Members
Last Login: Yesterday @ 6:13 PM
Points: 1,610,
Visits: 2,794
The thing I found on a dev server, the database developer has all the rights on the box
and when he runs the build script sometimes, it accidently goes to the master database.
One way is in the build script to add : Use userdatabase statement, then run the script, but I want also to avoid the accidental creation to master db.
Post #1409327
Lynn Pettis
Lynn Pettis
Posted Sunday, January 20, 2013 5:41 PM
SSC-Insane
Group: General Forum Members
Last Login: Yesterday @ 11:07 PM
Points: 21,625,
Visits: 27,468
sqlfriends (1/20/2013)
The thing I found on a dev server, the database developer has all the rights on the box
and when he runs the build script sometimes, it accidently goes to the master database.
One way is in the build script to add : Use userdatabase statement, then run the script, but I want also to avoid the accidental creation to master db.
The other is to create a DDL trigger that will prevent it as well. I think this is more viable than a policy.
Lynn Pettis
For better assistance in answering your questions, click here
For tips to get better help with Performance Problems, click here
For Running Totals and its variations, click here
or
when working with partitioned tables
For more about Tally Tables, click here
For more about Cross Tabs and Pivots, click here
and
here
Managing Transaction Logs
SQL Musings from the Desert
Fountain Valley SQL
(My Mirror Blog)
Post #1409331
Jayanth_Kurup
Jayanth_Kurup
Posted Monday, January 21, 2013 4:43 AM
SSCommitted
Group: General Forum Members
Last Login: Tuesday, May 07, 2013 6:43 AM
Points: 1,785,
Visits: 1,008
sqlfriends (1/20/2013)
The thing I found on a dev server, the database developer has all the rights on the box
and when he runs the build script sometimes, it accidently goes to the master database.
One way is in the build script to add : Use userdatabase statement, then run the script, but I want also to avoid the accidental creation to master db.
Set default database for that login to a the user database instead of master.
Jayanth Kurup
Post #1409479
sqlfriends
sqlfriends
Posted Tuesday, January 22, 2013 9:17 AM
SSCommitted
Group: General Forum Members
Last Login: Yesterday @ 6:13 PM
Points: 1,610,
Visits: 2,794
Thanks all, those are good ideas
Post #1410100
« Prev Topic
|
Next Topic »
Permissions
You
cannot
post new topics.
You
cannot
post topic replies.
You
cannot
post new polls.
You
cannot
post replies to polls.
You
cannot
edit your own topics.
You
cannot
delete your own topics.
You
cannot
edit other topics.
You
cannot
delete other topics.
You
cannot
edit your own posts.
You
cannot
edit other posts.
You
cannot
delete your own posts.
You
cannot
delete other posts.
You
cannot
post events.
You
cannot
edit your own events.
You
cannot
edit other events.
You
cannot
delete your own events.
You
cannot
delete other events.
You
cannot
send private messages.
You
cannot
send emails.
You
may
read topics.
You
cannot
rate topics.
You
cannot
vote within polls.
You
cannot
upload attachments.
You
may
download attachments.
You
cannot
post HTML code.
You
cannot
edit HTML code.
You
cannot
post IFCode.
You
cannot
post JavaScript.
You
cannot
post EmotIcons.
You
cannot
post or upload images.
Copyright © 2002-2013 Simple Talk Publishing. All Rights Reserved.
Privacy Policy.
Terms of Use.
Report Abuse.
