Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

SQL User Account assigned as db_owner of any new database that is created. Expand / Collapse
Author
Message
Posted Wednesday, June 25, 2014 12:36 PM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Wednesday, September 3, 2014 11:39 AM
Points: 11, Visits: 40
While going through a monthly security check I noticed that a user account that is the owner of one database in the server and granted the server role of dbcreator is showing up as db_owner of all newly created databases on the server. This account has no business having permissions to any other data on the server especially since it is a 3rd party application account. I have tried removing the dbcreator role and testing but that did not work. What am I missing?

Thanks
Post #1586054
Posted Wednesday, June 25, 2014 12:58 PM This worked for the OP Answer marked as solution
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Wednesday, September 3, 2014 11:39 AM
Points: 11, Visits: 40
Never mind, I found out why. Somehow, that user was placed into the model database as an owner. As a result, the model's structure was applied to every new database that was created thereby granting that user db_owner.
Post #1586063
Posted Wednesday, June 25, 2014 3:58 PM


SSChampion

SSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampion

Group: General Forum Members
Last Login: 2 days ago @ 9:27 PM
Points: 13,776, Visits: 28,178
Nice job figuring it out. And thanks for posting the solution so anyone else who finds the question knows what you did to solve it.

----------------------------------------------------
"The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood..." Theodore Roosevelt
The Scary DBA
Author of: SQL Server Query Performance Tuning
SQL Server 2012 Query Performance Tuning
SQL Server 2008 Query Performance Tuning Distilled
and
SQL Server Execution Plans

Product Evangelist for Red Gate Software
Post #1586176
Posted Thursday, June 26, 2014 6:53 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Wednesday, September 3, 2014 11:39 AM
Points: 11, Visits: 40
Thank you, much appreciated.
Post #1586394
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse