Home Forums SQL Server 2008 SQL Server Newbies Do Users based on logins in master have access to other databases? RE: Do Users based on logins in master have access to other databases?

  • clintonG (3/17/2013)


    kevaburg (3/17/2013)


    Logins created within the instance have by default no automatic access to any database within that instance. Each created user needs to be explicitly mapped to a database and assigned roles as appropriate.

    The master database contains the structures of the databases on the instance and access to it does not imply access to other databases. It is really worth reading the security articles pertaining to fixed server roles and database level permissions to ensure to don't end up opening a security hole where you don't want one.

    Thanks for comments.

    I've been reading more about security and fixed server roles.

    This article explains how my endeavor may be futile anyway...

    http://www.netspi.com/blog/2012/08/16/sql-server-2008-local-administrator-privilege-escalation/

    However all I really need to do is disallow Users from deleting data while using a LightSwitch app and I will continue to read and learn how to do so

    Let's make it easier for others to read:

    http://www.netspi.com/blog/2012/08/16/sql-server-2008-local-administrator-privilege-escalation/