Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

create a policy in policy management Expand / Collapse
Author
Message
Posted Friday, January 18, 2013 6:05 PM
SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: Thursday, July 17, 2014 3:41 PM
Points: 1,749, Visits: 3,151
How to create a policy that prevents users to create user objects in master database?

Thanks
Post #1409139
Posted Friday, January 18, 2013 6:17 PM


SSC-Insane

SSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-Insane

Group: General Forum Members
Last Login: Yesterday @ 10:01 PM
Points: 22,980, Visits: 31,456
Not so much as a policy, but that could be handled with a DDL trigger.



Lynn Pettis

For better assistance in answering your questions, click here
For tips to get better help with Performance Problems, click here
For Running Totals and its variations, click here or when working with partitioned tables
For more about Tally Tables, click here
For more about Cross Tabs and Pivots, click here and here
Managing Transaction Logs

SQL Musings from the Desert Fountain Valley SQL (My Mirror Blog)
Post #1409142
Posted Saturday, January 19, 2013 6:47 AM


SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: Thursday, June 12, 2014 2:04 PM
Points: 1,789, Visits: 1,014
If you follow the principal of least privileges the user shouldnt be able to create objects under the master database anyway.

Jayanth Kurup
Post #1409196
Posted Sunday, January 20, 2013 5:26 PM
SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: Thursday, July 17, 2014 3:41 PM
Points: 1,749, Visits: 3,151
The thing I found on a dev server, the database developer has all the rights on the box
and when he runs the build script sometimes, it accidently goes to the master database.

One way is in the build script to add : Use userdatabase statement, then run the script, but I want also to avoid the accidental creation to master db.
Post #1409327
Posted Sunday, January 20, 2013 5:41 PM


SSC-Insane

SSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-InsaneSSC-Insane

Group: General Forum Members
Last Login: Yesterday @ 10:01 PM
Points: 22,980, Visits: 31,456
sqlfriends (1/20/2013)
The thing I found on a dev server, the database developer has all the rights on the box
and when he runs the build script sometimes, it accidently goes to the master database.

One way is in the build script to add : Use userdatabase statement, then run the script, but I want also to avoid the accidental creation to master db.


The other is to create a DDL trigger that will prevent it as well. I think this is more viable than a policy.



Lynn Pettis

For better assistance in answering your questions, click here
For tips to get better help with Performance Problems, click here
For Running Totals and its variations, click here or when working with partitioned tables
For more about Tally Tables, click here
For more about Cross Tabs and Pivots, click here and here
Managing Transaction Logs

SQL Musings from the Desert Fountain Valley SQL (My Mirror Blog)
Post #1409331
Posted Monday, January 21, 2013 4:43 AM


SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: Thursday, June 12, 2014 2:04 PM
Points: 1,789, Visits: 1,014
sqlfriends (1/20/2013)
The thing I found on a dev server, the database developer has all the rights on the box
and when he runs the build script sometimes, it accidently goes to the master database.

One way is in the build script to add : Use userdatabase statement, then run the script, but I want also to avoid the accidental creation to master db.


Set default database for that login to a the user database instead of master.


Jayanth Kurup
Post #1409479
Posted Tuesday, January 22, 2013 9:17 AM
SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: Thursday, July 17, 2014 3:41 PM
Points: 1,749, Visits: 3,151
Thanks all, those are good ideas
Post #1410100
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse