Post reply

Permissions

  • June 30, 2021 at 9:25 pm

    #3902255

    I restored a database from QA to production. I removed logins/users from database since they all were in same group with READ only. I checked and don't see any explicit permissions, and none of them have a schema or role they are owner of, but one of the users can still update stuff in this database. I had the other DBA check and he couldn't find anything either.

    What in the world am I missing here?

  • June 30, 2021 at 9:30 pm

    #3902258

    Check that users login - are they a member of the sysadmin role?  Check other groups that have access to the server - do any of those groups have access to the database where this user is a member?

    Jeffrey Williams
    Problems are opportunities brilliantly disguised as insurmountable obstacles.

    How to post questions to get better answers faster
    Managing Transaction Logs

  • June 30, 2021 at 9:43 pm

    #3902261

    He is not a member of sysadmin role.

    He is in one group, but it has read only and that is it.

    It must be something that carried over from the other environment, but just can't figure it out yet. So bizarre.

  • June 30, 2021 at 9:46 pm

    #3902262

    DBA_318 wrote:

    He is not a member of sysadmin role.

    He is in one group, but it has read only and that is it.

    It must be something that carried over from the other environment, but just can't figure it out yet. So bizarre.

    Have you tried using xp_LoginInfo to make sure of that?

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
    "Change is inevitable... change for the better is not".
    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)
    Intro to Tally Tables and Functions

  • June 30, 2021 at 10:25 pm

    #3902280

    I found him in another group as Admin and have no clue how or why he is there.

     

    Thanks Jeff!

  • July 1, 2021 at 3:34 am

    #3902329

    My pleasure and thank you for the feedback.  xp_LoginInfo is one of those tools that I don't need to use often but it's a real life saver when I do need it.

    Another handy tool is sp_validatelogins.

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
    "Change is inevitable... change for the better is not".
    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)
    Intro to Tally Tables and Functions

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply