January 17, 2011 at 12:07 am
Hi,
is there a way to predict, which login configuration is used, if a user is member of several groups?
For example:
login for domain group A members - default language: spanish
login for domain group B members - default language: english
login for domain group C members - default language: french
Let's assume a user is member of group A,B and C - which language is used? :ermm:
January 17, 2011 at 1:02 am
i think the language is defined at the server level not the user specific level.
----------
Ashish
January 17, 2011 at 3:26 am
Ok, after some testing I got this:
- the first group listed under security(server instance) is used for language
- an other group is used to map the domain group to the specific database (user)
This seems to be a bug (using SQL server 2005). Settings should be taken from the group security configuration used for mapping.
I tested the used language with: select @@LANGUAGE
January 18, 2011 at 4:58 am
Database permissions are taken by combining all the permissions in all the groups the user is a member of. Explicit DENY permissions to a given object in a given group will always override any specific read or write permissions to the same object in another group.
The derivation of other attributes (language, default database, etc) is officially described as 'undefined', meaning any of the attributes can be taken from any of the groups, and even that SQL Server may use an internal default if there is conflicting information from the groups. You should not assume that any pattern you find during your testing will always be applied.
A lot of people have requested that Microsoft provide some means of giving certainty about how attributes are applied for people that belong to multiple groups, and it is worth looking on Connect to see the current status of this. My understanding is that something may be done for some of the attributes in Denali (next version of SQL Server), but it is unlikely to be ported to older versions.
Original author: https://github.com/SQL-FineBuild/Common/wiki/ 1-click install and best practice configuration of SQL Server 2019, 2017 2016, 2014, 2012, 2008 R2, 2008 and 2005.
When I give food to the poor they call me a saint. When I ask why they are poor they call me a communist - Archbishop Hélder Câmara
Viewing 4 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply