Wednesday, March 28, 2012

Hide databases in SQL EM from dbo owner

If i create a new SQL login and give that login db ownership for a test db.
When that user adds my SQL Server through his own SQL EM, why does he/she
also see all other objects (databases, sql security logins, DTS, ...)?

Is there a way for the user to open SQL EM but only see his/her db and
nothing
more?

Thank youIn article <0Fp2d.21814$0h7.1558418@.news20.bellglobal.com>,
sergea@.nospam.ehmail.com says...
> If i create a new SQL login and give that login db ownership for a test db.
> When that user adds my SQL Server through his own SQL EM, why does he/she
> also see all other objects (databases, sql security logins, DTS, ...)?
> Is there a way for the user to open SQL EM but only see his/her db and
> nothing
> more?

Now you know why they call it "Enterprise Manager". If you don't want
someone gaining access to your database, and you don't trust the users
with SA access then you are screwed. Even if you did hide it, somehow,
the SA account can gain access to it.

Only DBA's should be using EM.

--
--
spamfree999@.rrohio.com
(Remove 999 to reply to me)|||On Thu, 16 Sep 2004 19:50:20 -0400, serge wrote:

>Is there a way for the user to open SQL EM but only see his/her db and
>nothing
>more?

Hi Serge,

Not as far as I know. This information is available in tables in the
master database that everybody has access to. EM presents it nicely, but
it's possible to retrieve the same information by executing some queries
in Query Analyzer, osql or any other tool.

Users can see the name of the database, but not the contents, so you
shouldn't be too worried about it (unless you have a database called
MyPlansToRipOffTheBoss - but you could always choose a less obvious name).

Best, Hugo
--

(Remove _NO_ and _SPAM_ to get my e-mail address)|||Hi

EM is not really something you should be giving to just anybody! If you
really want to do this, then you may want to create a separate instance,
although this may be a heavy overhead if you require more than a couple.

John

"serge" <sergea@.nospam.ehmail.com> wrote in message
news:0Fp2d.21814$0h7.1558418@.news20.bellglobal.com ...
> If i create a new SQL login and give that login db ownership for a test
db.
> When that user adds my SQL Server through his own SQL EM, why does he/she
> also see all other objects (databases, sql security logins, DTS, ...)?
> Is there a way for the user to open SQL EM but only see his/her db and
> nothing
> more?
> Thank you|||Thank you for the responses.

What about this SQL Web Data Administrator that can be run
using IIS or VS.Net.

Has anyone tried this? If so, maybe through this web front-end, there
might be better ways to control which tools to show for the users?

No comments:

Post a Comment