Answered by:
Restrict specific users to any be able to see specific databases on the same instance??? Help....

Question
-
We Have several Databases on the same instance and we would like to be able to set up different users to only be able to view and control specific DB's assigned to each specific User. We have managed to restrict users to only be allowed to control certain DB's but they can still see all of the other DB's on the instance via Management Studio.
Does anyone know if this is at all possible and/or if there might be a different way to achieve the same result?
Any help would be very much appreciated been going round in circle for several days now.Monday, February 14, 2011 11:50 AM
Answers
-
Please check this article in Books Online: http://msdn.microsoft.com/en-us/library/ms189077.aspx
This article describes the VIEW ANY DATABASE permissions. This is by default granted to public. But you can deny this. Then users will only see the databases they own.
Robert Hartskeerl - http://sqlblog.hartskeerl.nl - http://twitter.com/rhartskeerl- Proposed as answer by WeiLin Qiao Thursday, February 17, 2011 6:36 AM
- Marked as answer by WeiLin Qiao Monday, February 21, 2011 1:19 PM
Monday, February 14, 2011 12:52 PM -
What you are trying to do is partly impossible with current SQL server security architecture when you revoke view any database from public the logins might not be able to see other databases than master and tempdb though they have access to user database , see my reply from SQL security forum thread http://social.msdn.microsoft.com/Forums/en/sqlsecurity/thread/64aa6538-5f57-491b-9c53-4a103ae71637
Thanks, Leks- Proposed as answer by WeiLin Qiao Thursday, February 17, 2011 6:34 AM
- Marked as answer by WeiLin Qiao Monday, February 21, 2011 1:19 PM
Monday, February 14, 2011 7:36 PMAnswerer
All replies
-
Please check this article in Books Online: http://msdn.microsoft.com/en-us/library/ms189077.aspx
This article describes the VIEW ANY DATABASE permissions. This is by default granted to public. But you can deny this. Then users will only see the databases they own.
Robert Hartskeerl - http://sqlblog.hartskeerl.nl - http://twitter.com/rhartskeerl- Proposed as answer by WeiLin Qiao Thursday, February 17, 2011 6:36 AM
- Marked as answer by WeiLin Qiao Monday, February 21, 2011 1:19 PM
Monday, February 14, 2011 12:52 PM -
What you are trying to do is partly impossible with current SQL server security architecture when you revoke view any database from public the logins might not be able to see other databases than master and tempdb though they have access to user database , see my reply from SQL security forum thread http://social.msdn.microsoft.com/Forums/en/sqlsecurity/thread/64aa6538-5f57-491b-9c53-4a103ae71637
Thanks, Leks- Proposed as answer by WeiLin Qiao Thursday, February 17, 2011 6:34 AM
- Marked as answer by WeiLin Qiao Monday, February 21, 2011 1:19 PM
Monday, February 14, 2011 7:36 PMAnswerer