all groups > sql server connect > july 2003 >
You're in the

sql server connect

group:

HOWTO: Block SQL Server EM connections (or visibility of inaccessible databases)



HOWTO: Block SQL Server EM connections (or visibility of inaccessible databases) R Baker
7/25/2003 6:17:07 PM
sql server connect: Is there a way to grant access to a SQL Server database while not permitting
connections via SQL Enterprise Manager. We find that it is showing all the
database names (even those for which the connecting user has no
access/permissions), and this is a security exposure.

Thanks!

Re: HOWTO: Block SQL Server EM connections (or visibility of inaccessible databases) R Baker
7/25/2003 6:32:46 PM
[quoted text, click to view]

Ok, removing SELECT permission from the sysdatabases table in the MASTER
database from the "public" role seems to do the trick, but this seems a wee
bit like overkill. Is there a more structured way. Ideally, users could see
the databases they had been granted access to.

Re: HOWTO: Block SQL Server EM connections (or visibility of inaccessible databases) Kevin
7/28/2003 8:07:40 AM
There is no supported way to do this, you found one way -

Question: What is the specific requirement here, are you storing sensitive
information in your database names?


--
----------------------------------------------------
The views expressed here are my own
and not of my employer.
----------------------------------------------------
[quoted text, click to view]

Re: HOWTO: Block SQL Server EM connections (or visibility of inaccessible databases) R Baker
7/28/2003 2:17:46 PM
[quoted text, click to view]

Thanks.

It's not really *that* sensitive, but there is some information that might
be deducible (e.g. client customer company names) that we would prefer to
control distribution of.


[quoted text, click to view]

Re: HOWTO: Block SQL Server EM connections (or visibility of inaccessible databases) Jacco Schalkwijk
7/28/2003 4:49:27 PM
That functionality will be in the next version of SQL Server. It may be a
workaround (depending on the license you use) to run 2 separate instances of
SQL Server on your machine and move the databases that you don't want to be
public to the second instance and limit the access on that.

--
Jacco Schalkwijk MCDBA, MCSD, MCSE
Database Administrator
Eurostop Ltd.


[quoted text, click to view]

AddThis Social Bookmark Button