It is common that vendors ask for permission to create databases (or they applications need) on your servers and most of DBAs I have seen immediately grant them dbCreator server role. But they are not aware that members of that role are able to DROP/ALTER any databases on the entire server regardless of whether or not you even have a user account in the database.Did you really want that??
The right approach is to grant CREATE ANY DATABASE permission and then the user is able to DROP/ALTER he/she owns.
Thursday, September 2, 2010
Subscribe to:
Post Comments (Atom)
3 comments:
This is a great post,which has a lot of readers.
Such kind of post giving us various knowaledge,it worthy to read.It is so wonderful.
Our company provides Nike Shox Clearance rapid and safe, free shipping network marketing.
Only this form is fully prepared, carefully organized and promptly summarized, can it gain the actual effect
Nike shox shoes can surely not let you down,romance yourself with nike shox
Office 2010is powerful!
Microsoft Office 2010is the best software in the world.
Microsoft wordis so great!
Office 2007makes life great!
Many people likeMicrosoft Office.
Microsoft Office 2007is welcomed by the whole world.
Office 2007 keyis available here.
Office 2007 downloadis on sale now!
Office 2007 Professionalbring me so much convenience.
Outlook 2010 make life wonderful!
Microsoft outlook is my love.
Microsoft outlook 2010 is convenient!
Windows 7 is convenient!
Post a Comment