Friday, March 9, 2012

Drop database permissions

how can I deny drop database from "database creators" servr role?
You could try DENY ALTER DATABASE. I'm not sure, though...
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
> how can I deny drop database from "database creators" servr role?
|||Server: Msg 165, Level 16, State 1, Line 1
Privilege ALTER DATABASE may not be granted or revoked.
"Tibor Karaszi" wrote:

> You could try DENY ALTER DATABASE. I'm not sure, though...
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
> Blog: http://solidqualitylearning.com/blogs/tibor/
>
> "Amit Eshet" <Amit Eshet@.discussions.microsoft.com> wrote in message
> news:CDA547DA-EE96-4B1D-8FB3-35AA9B48D920@.microsoft.com...
>
|||Hi Amit
I believe what you want to try is not possible
1) Changes cannot be made to Fixed Server Roles.
2) Once a user is granted Database Creator permissions, by default he
becomes the database owner. And the database owner cannot be denied the
rights to drop his database.
Regards
Amer M J
MCP
"Amit Eshet" wrote:
[vbcol=seagreen]
>
> Server: Msg 165, Level 16, State 1, Line 1
> Privilege ALTER DATABASE may not be granted or revoked.
>
> "Tibor Karaszi" wrote:
|||thanks,
but now the user can drop other databases to (am I wrong?)
"Amer M J" wrote:
[vbcol=seagreen]
> Hi Amit
> I believe what you want to try is not possible
> 1) Changes cannot be made to Fixed Server Roles.
> 2) Once a user is granted Database Creator permissions, by default he
> becomes the database owner. And the database owner cannot be denied the
> rights to drop his database.
> Regards
> Amer M J
> MCP
> "Amit Eshet" wrote:
|||Hi Amit
Yes, once the user has been added to the Database Creators group, he gains a
default right to drop databases and as i mentioned earlier tht changes are
not allowed to the fixed server roles.
"Amit Eshet" wrote:
[vbcol=seagreen]
> thanks,
> but now the user can drop other databases to (am I wrong?)
> "Amer M J" wrote:

No comments:

Post a Comment