<a href="http://g.adspeed.net/ad.php?do=clk&zid=15220&wd=468&ht=60&pair=as" target="_blank"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15220&wd=468&ht=60&pair=as" alt="i" width="468" height="60"/></a>
Log in
::
Register
::
Not logged in
Home
Tags
Articles
Editorials
Stairways
Forums
Scripts
Videos
Blogs
QotD
Books
Ask SSC
SQL Jobs
Training
Authors
About us
Contact us
Newsletters
Write for us
<a href="http://g.adspeed.net/ad.php?do=clk&zid=15491&wd=120&ht=300&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15491&wd=120&ht=300&pair=as" alt="i" width="120" height="300"/></a>
Recent Posts
Recent Posts
Popular Topics
Popular Topics
Home
Search
Members
Calendar
Who's On
Home
»
SQL Server 2005
»
SQL Server 2005 Security
»
Login gets deny permission
Login gets deny permission
Rate Topic
Display Mode
Topic Options
Author
Message
rinu philip
rinu philip
Posted Monday, September 14, 2009 2:16 AM
SSC Veteran
Group: General Forum Members
Last Login: Today @ 3:03 AM
Points: 202,
Visits: 321
On our test server – the SQL 2005 default instance, somehow every now and then the permission using login 'TestLogin' is getting changed for two databases.
This user should have db_datareader but every now and then the user gets db_datareader and db_denydatareader permissions set for two databases.
Please help, with suggestions
Post #787235
Silverfox
Silverfox
Posted Monday, September 14, 2009 4:46 AM
SSCrazy
Group: General Forum Members
Last Login: Tuesday, March 26, 2013 6:50 AM
Points: 2,719,
Visits: 1,065
rinu philip (9/14/2009)
On our test server – the SQL 2005 default instance, somehow every now and then the permission using login 'TestLogin' is getting changed for two databases.
This user should have db_datareader but every now and then the user gets db_datareader and db_denydatareader permissions set for two databases.
Please help, with suggestions
hmm, unless you have manual changes going on, could be an auditing issue, do you have any sql jobs that re-evaluate logins/permissions, or do you have any triggers set up, either at the database or server level..
Ah, are these databases being restored from a production server on a periodic basis, where the permissions for that login would be different?
--------------------------------------------------------------------------------------
Recommended Articles on How to help us help you and
solve commonly asked questions
Forum Etiquette: How to post data/code on a forum to get the best help by Jeff Moden
Managing Transaction Logs by Gail Shaw
How to post Performance problems by Gail Shaw
Help, my database is corrupt. Now what? by Gail Shaw
Post #787315
rinu philip
rinu philip
Posted Monday, September 14, 2009 5:13 AM
SSC Veteran
Group: General Forum Members
Last Login: Today @ 3:03 AM
Points: 202,
Visits: 321
thanks, i will check with the suggestions specified,however, can you tell me if I run a trace can I find out how this is happening, also what options I need to select in the sql trace. thanks
Post #787333
Silverfox
Silverfox
Posted Monday, September 14, 2009 5:24 AM
SSCrazy
Group: General Forum Members
Last Login: Tuesday, March 26, 2013 6:50 AM
Points: 2,719,
Visits: 1,065
rinu philip (9/14/2009)
thanks, i will check with the suggestions specified,however, can you tell me if I run a trace can I find out how this is happening, also what options I need to select in the sql trace. thanks
Ok, not sure that a trace would be the best thing, depends on how long you can leave it running, but to answer your question.
The event group is Security Audit, and for example...
Audit Add member to DB Role Event
depends on what information you want to retrieve, but the events in that group will give you what you need.
to be honest, if this is a test server, you can manually add and remove the db permissions for this login while the trace is running, until you are happy with the information that you are getting.
--------------------------------------------------------------------------------------
Recommended Articles on How to help us help you and
solve commonly asked questions
Forum Etiquette: How to post data/code on a forum to get the best help by Jeff Moden
Managing Transaction Logs by Gail Shaw
How to post Performance problems by Gail Shaw
Help, my database is corrupt. Now what? by Gail Shaw
Post #787340
rinu philip
rinu philip
Posted Monday, September 14, 2009 6:27 AM
SSC Veteran
Group: General Forum Members
Last Login: Today @ 3:03 AM
Points: 202,
Visits: 321
thanks alot for your replies..
Post #787383
« Prev Topic
|
Next Topic »
Permissions
You
cannot
post new topics.
You
cannot
post topic replies.
You
cannot
post new polls.
You
cannot
post replies to polls.
You
cannot
edit your own topics.
You
cannot
delete your own topics.
You
cannot
edit other topics.
You
cannot
delete other topics.
You
cannot
edit your own posts.
You
cannot
edit other posts.
You
cannot
delete your own posts.
You
cannot
delete other posts.
You
cannot
post events.
You
cannot
edit your own events.
You
cannot
edit other events.
You
cannot
delete your own events.
You
cannot
delete other events.
You
cannot
send private messages.
You
cannot
send emails.
You
may
read topics.
You
cannot
rate topics.
You
cannot
vote within polls.
You
cannot
upload attachments.
You
may
download attachments.
You
cannot
post HTML code.
You
cannot
edit HTML code.
You
cannot
post IFCode.
You
cannot
post JavaScript.
You
cannot
post EmotIcons.
You
cannot
post or upload images.
Copyright © 2002-2013 Simple Talk Publishing. All Rights Reserved.
Privacy Policy.
Terms of Use.
Report Abuse.
