Stop Users from Accessing Data

[LonnieJohnson]

Is there a command or process that I can invoke that will keep users that are not DBOs from accessing any data on a SQL Server or database?

ProDev, Builders of Affordable Software Applications
Visit me at ==>

http://www.prodev.us

May God bless you beyond your imagination!!!

 

[jrbarnett]

Revoke db_datareader or db_owner permissions (or direct select permissions on tables), and access all data through stored procedures with parameters to select data to retrieve.
All you need to do is grant execute permissions on the stored procs and call them as appropriate from your application.

John

 

[yelworcm]

If you DENY permissions on an object, the deny takes precedence of a number of grants. If your users are not db_owners, it should prevent them from seeing it. I have not tested this through chain of ownership (i.e. a view on a denied table).

 

[LonnieJohnson]

I decided to use the RESTRICTED_USER parm of the ALTER DATABASE COMMAND.

ProDev, Builders of Affordable Software Applications
Visit me at ==>

http://www.prodev.us

May God bless you beyond your imagination!!!