Sunday, March 25, 2012

db_owner - Unauthorized Size increase

Hello There,
I have a simple questions.
How can i restrict the maximum size of the database for a db_owner?
ALTER DATABASE permissions default to members of the sysadmin and
dbcreator fixed server roles, and to members of the db_owner fixed
database roles. These permissions are not transferable.
They can do this:
This example creates a database and alters it to add a new 5-MB data
file.
USE master
ALTER DATABASE Test1
ADD FILE
(
NAME = Test1dat2,
FILENAME = 'c:\Program Files\Microsoft SQL
Server\MSSQL\Data\t1dat2.ndf',
SIZE = 5MB,
MAXSIZE = 100MB,
FILEGROWTH = 5MB
)
GO
What i want is to provide the db_owner but we need to restrict the
maxSize of the database.
Sincerely,
Yusbel GarciaIf somebody is db_owner, they can do whatever they like, within
the databases that they own.
Your best bet, which as always is the one involving the most work,
is to look at what functionality your users "must" have, in order for
them to perform their functions.
As always, if you leave something available for someone to use,
they'll eventually use it.
"Yusbel Garcia" <yusbel@.ISQsolutions.com> wrote in message
news:769e3cd4.0308121023.6b555837@.posting.google.com...
> Hello There,
> I have a simple questions.
> How can i restrict the maximum size of the database for a db_owner?
> ALTER DATABASE permissions default to members of the sysadmin and
> dbcreator fixed server roles, and to members of the db_owner fixed
> database roles. These permissions are not transferable.
> They can do this:
> This example creates a database and alters it to add a new 5-MB data
> file.
> USE master
> ALTER DATABASE Test1
> ADD FILE
> (
> NAME = Test1dat2,
> FILENAME = 'c:\Program Files\Microsoft SQL
> Server\MSSQL\Data\t1dat2.ndf',
> SIZE = 5MB,
> MAXSIZE = 100MB,
> FILEGROWTH = 5MB
> )
> GO
> What i want is to provide the db_owner but we need to restrict the
> maxSize of the database.
>
> Sincerely,
> Yusbel Garcia|||Thank for your answer, i believe that microsoft it should have a solutions
to revoke the alter database permission for a db_owner database exist some
hosting company that are providing the db_owner permission and they restrict
the maxSize of a database unles they lie, and i don't believe they use the
windows quota to restrict the maxSize Database.
Regards,
Yusbel Garcia
"Stressed" <k@.c.co.uk> wrote in message
news:eMV%23FuaYDHA.2448@.TK2MSFTNGP09.phx.gbl...
> If somebody is db_owner, they can do whatever they like, within
> the databases that they own.
> Your best bet, which as always is the one involving the most work,
> is to look at what functionality your users "must" have, in order for
> them to perform their functions.
> As always, if you leave something available for someone to use,
> they'll eventually use it.
>
> "Yusbel Garcia" <yusbel@.ISQsolutions.com> wrote in message
> news:769e3cd4.0308121023.6b555837@.posting.google.com...
> > Hello There,
> >
> > I have a simple questions.
> >
> > How can i restrict the maximum size of the database for a db_owner?
> >
> > ALTER DATABASE permissions default to members of the sysadmin and
> > dbcreator fixed server roles, and to members of the db_owner fixed
> > database roles. These permissions are not transferable.
> >
> > They can do this:
> >
> > This example creates a database and alters it to add a new 5-MB data
> > file.
> >
> > USE master
> > ALTER DATABASE Test1
> > ADD FILE
> > (
> > NAME = Test1dat2,
> > FILENAME = 'c:\Program Files\Microsoft SQL
> > Server\MSSQL\Data\t1dat2.ndf',
> > SIZE = 5MB,
> > MAXSIZE = 100MB,
> > FILEGROWTH = 5MB
> > )
> > GO
> >
> > What i want is to provide the db_owner but we need to restrict the
> > maxSize of the database.
> >
> >
> > Sincerely,
> > Yusbel Garcia
>

No comments:

Post a Comment