Another mdw question

  • Thread starter Thread starter Br1an_g
  • Start date Start date
B

Br1an_g

I have followed the instruction in the Security FAQ about
securing a database, but find that i am still able to open
the database by using the default system.mdw file.

i thought that by securing you prevented this from
happening? i created a new user, added to admins, removed
admin from admins group, ran security wizard, then created
new groups and set permissions. I also removed the
Open/Run permission from the users group.

have i done something wrong?

thanks

Brian
 
Br1an_g said:
I have followed the instruction in the Security FAQ about
securing a database, but find that i am still able to open
the database by using the default system.mdw file.

i thought that by securing you prevented this from
happening? i created a new user, added to admins, removed
admin from admins group, ran security wizard, then created
new groups and set permissions. I also removed the
Open/Run permission from the users group.

have i done something wrong?
Click to expand...

Check to see whether "Admin" is still listed as the owner of the database.
Owners have privileges above and beyond those explicitly granted to them.
 
Rick Brandt said:
Check to see whether "Admin" is still listed as the owner of the database.
Owners have privileges above and beyond those explicitly granted to them.
Click to expand...

Aha, one of my hobby horses!

There is a slight twist on what you say, when it comes to the owner of the
database<. Despite what many people believe, the owner of the database does
not< have unrestricted access to every object within the database - unless
Click to expand...
he gets that for some other reason - eg. he is also the owner of the object
in question.

For example, you can easily construct a database that is owned by the Admin
user, but where certain objects in that database >can not< be accessed by
that Admin user.

Cheers,
TC
 
Sorry,

i did do that, just forgot to list it.

the default.mdw on my PC has me as a user, and part of the
normal user group.

ive tried this on a few other PC's and it works
correctly "you do not have the necessary permissions..etc"

not worried now as it seems to be working on all PC's
except mine..

any ideas why this would happen?

thanks

Brian
 
Back
Top