Welcome CisForCookie, the newest member
New user?    Register    Login
http://www.attackprevention.com


Date Submitted: 08/16/05
Hits: 54
Rating: 00000 based on 0 votes

SQL Server 2000: Permissions on System Tables Granted to Logins Due to the Public Role



Added by Papergrl

Description: In this paper I will cover the access rights to system tables the public role has in these two system databases as well as in a typical user database. I'll also cover how the guest user adds to the conundrum, especially with respect to the system databases and cross-database ownership chaining. Finally, I'll look at what permissions can be revoked from the public role in each database and what the consequences are, both from a practical perspective (typical applications) to an extreme example (Microsoft's OpenHack 4 configuration).

Read the Complete Paper



You don't have permission to post replies.

Please login or register.

Copyright 2008 AttackPrevention